Malicious code in vobin (npm)

The package vobin was found to contain malicious code...