Malicious code in mentors-sdk-js (npm)

The package mentors-sdk-js was found to contain malicious code...