Malicious code in save-dev (npm)

The package save-dev was found to contain malicious code...