Malicious code in leo-password-reset-service (npm)

The package leo-password-reset-service was found to contain malicious code...