Malicious code in square-red-puffin (npm)

--- -= Per source details. Do not edit below this line.=-...