Malicious code in express-yandex-host-fallback (npm)

The package express-yandex-host-fallback was found to contain malicious code...