Malicious code in helios-ultra-rollup-plugin-gridsome (npm)

The package helios-ultra-rollup-plugin-gridsome was found to contain malicious code...