Malicious code in postcss-url-inline-base64 (npm)

The package postcss-url-inline-base64 was found to contain malicious code...