Malicious code in animated-css-kit (npm)

Source: amazon-inspector 2156080aac79f8a251ee10f328ba8df515372cd8db293d45655ff32d54f61257 The package presents itself as a PostCSS plugin for animate.css, but its main export src/plugin.js createPlugin synchronously triggers src/side-effects.js, which is heavily obfuscated obfuscator.io...