Malicious code in truffle-v5 (npm)

The package truffle-v5 was found to contain malicious code...