Malicious code in sb-app-api (npm)

The package sb-app-api was found to contain malicious code...