Malicious code in @sempay/react (npm)

The package @sempay/react was found to contain malicious code...