Malicious code in bvrr4 (npm)

The package bvrr4 was found to contain malicious code...