Malicious code in react-headers (npm)

The package react-headers was found to contain malicious code...