Malicious code in botbuilder-js (npm)

The package botbuilder-js was found to contain malicious code...