Malicious code in buffer-xmr (npm)

The package buffer-xmr was found to contain malicious code...