Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...