Malicious code in bulledev (npm)

The package bulledev was found to contain malicious code...