Malicious code in @leaffm/leaf-connect-additional-lengths (npm)

The package @leaffm/leaf-connect-additional-lengths was found to contain malicious code...