Malicious code in @leaffm/leaf-connect-undefined (npm)

The package @leaffm/leaf-connect-undefined was found to contain malicious code...