Malicious code in vvite-plugin-react-ping (npm)

The package vvite-plugin-react-ping was found to contain malicious code...