Malicious code in openzeppelin-solidity-2.3.0 (npm)

The package openzeppelin-solidity-2.3.0 was found to contain malicious code...