Malicious code in webpack-public-path-plugin (npm)

The package webpack-public-path-plugin was found to contain malicious code...