Malicious code in import-big-runtime-permission-web (npm)

The package import-big-runtime-permission-web was found to contain malicious code...