Malicious code in loom-plugin-postcss (npm)

The package loom-plugin-postcss was found to contain malicious code...