Malicious code in kwp-a-b-testing (npm)

The package communicates with a domain associated with malicious activity...