Malicious code in parse-react-next (npm)

The package parse-react-next was found to contain malicious code...