Malicious code in node-pelcod-decoder (npm)

The package node-pelcod-decoder was found to contain malicious code...