Malicious code in bos-fontmin (npm)

The package bos-fontmin was found to contain malicious code...