Malicious code in browser-sync-task-runner (npm)

The package browser-sync-task-runner was found to contain malicious code...