Malicious code in buffer-xos (npm)

The package buffer-xos was found to contain malicious code...