Malicious code in bem-page-object (npm)

The package bem-page-object was found to contain malicious code...