Malicious code in dompurifier (npm)

The package dompurifier was found to contain malicious code...