Malicious code in bloom-web (npm)

The package bloom-web was found to contain malicious code...