The module pandora-doomsday infects other modules. It's since been unpublished from the registry.Referenceshttps://nodesecurity.io/advisories/482