[holmberd]

If your npm is up-to-date it would have provided a critical warning about the use of eval in that code.

[bradyd]

Can you give some more information on this? Is this part of the npm-audit feature?