Malicious code in billets (npm)

The package billets was found to contain malicious code...