Malicious code in @sellerly-kit/amazon-token-connect (npm)

The package @sellerly-kit/amazon-token-connect was found to contain malicious code...