Malicious code in es6-demo-react-npm2 (npm)

The package es6-demo-react-npm2 was found to contain malicious code...