Malicious code in buffer-xov (npm)

The package buffer-xov was found to contain malicious code...