Malicious code in koa-react-sidecar (npm)

The package koa-react-sidecar was found to contain malicious code...