Malicious code in duo-jsx (npm)

The package duo-jsx was found to contain malicious code...