Malicious code in kronos-hexo-nodemon-firebase (npm)

The package kronos-hexo-nodemon-firebase was found to contain malicious code...