Malicious code in xml-meteor-local-browserify (npm)

The package xml-meteor-local-browserify was found to contain malicious code...