Malicious code in babel-npm-publish (npm)

The package babel-npm-publish was found to contain malicious code...