Malicious code in buffer-xnr (npm)

The package buffer-xnr was found to contain malicious code...