Malicious code in buffer-xkr (npm)

The package buffer-xkr was found to contain malicious code...