Malicious code in tabufi (npm)

The package tabufi was found to contain malicious code...