Malicious code in layout-experimental (npm)

The package layout-experimental was found to contain malicious code...