Malicious code in balloons (npm)

The package balloons was found to contain malicious code...