Malicious code in bluebutton-hapi (npm)

The package bluebutton-hapi was found to contain malicious code...