Malicious code in mobilefirst (npm)

The package mobilefirst was found to contain malicious code...