Malicious code in boson-csrf-accretion-stream (npm)

The package boson-csrf-accretion-stream was found to contain malicious code...