Malicious code in node-youtube-dash-sidx (npm)

The package node-youtube-dash-sidx was found to contain malicious code...