Malicious code in buffer-xoz (npm)

The package buffer-xoz was found to contain malicious code...