Malicious code in body-parse-xml (npm)

The package body-parse-xml was found to contain malicious code...