Malicious code in postcss-minify2 (npm)

The package postcss-minify2 was found to contain malicious code...