Malicious code in barnard-sequelize-buffer-duplex (npm)

The package barnard-sequelize-buffer-duplex was found to contain malicious code...