Malicious code in buffer-xgr (npm)

The package buffer-xgr was found to contain malicious code...