Malicious code in create-react-kit (npm)

The package create-react-kit was found to contain malicious code...