Pixel Streaming Web Server Possibly Contains Malicious Code

The cirrus web server is behind the signalling web server used in Pixel Streaming. The cirrus web server package was recently removed as seen here due to containing malicious code.

I am just wondering what impact this has on using Pixel Streaming. Is it a safe method of deployment still, or will it leave my application and infrastructure vulnerable? Thanks!