Malicious code in arcturus-global-hermes-less-loader (npm)

The package arcturus-global-hermes-less-loader was found to contain malicious code...