Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...