Malicious code in winston-datalog (npm)

The package winston-datalog was found to contain malicious code...