Malicious code in buffer-xob (npm)

The package buffer-xob was found to contain malicious code...