Malicious code in pegasus-element-ui-winston-event (npm)

The package pegasus-element-ui-winston-event was found to contain malicious code...