Malicious code in uphold-sdk-javascript-extensions (npm)

The package communicates with a domain associated with malicious activity...