Malicious code in bespoke-webpack (npm)

The package bespoke-webpack was found to contain malicious code...