Malicious code in react-launch (npm)

The package react-launch was found to contain malicious code...