Malicious code in gulp-dslash (npm)

The package gulp-dslash was found to contain malicious code...