Malicious code in react-aside (npm)

The package react-aside was found to contain malicious code...