Malicious code in babel-plugin-mail-transform-inline-imports-commonjs (npm)

The package babel-plugin-mail-transform-inline-imports-commonjs was found to contain malicious code...