Malicious code in react-play-action (npm)

The package react-play-action was found to contain malicious code...