Malicious code in barepo (npm)

The package barepo was found to contain malicious code...