Malicious code in babel-plugin-remove-jsx-empty-expression (npm)

The package communicates with a domain associated with malicious activity...