Malicious code in pega-dependency-confusion-package (npm)

The package communicates with a domain associated with malicious activity...