Malicious code in la-interactive-readerui (npm)

The package la-interactive-readerui was found to contain malicious code...