Malicious code in react-on-liferay (npm)

The package react-on-liferay was found to contain malicious code...