Malicious code in node-pdfmake (npm)

The package node-pdfmake was found to contain malicious code...