Malicious code in sbg-gulp (npm)

The package sbg-gulp was found to contain malicious code...