Malicious code in node-red-contrib-xmlc14n (npm)

The package node-red-contrib-xmlc14n was found to contain malicious code...