Malicious code in stream-weywot-postcss-loader-version (npm)

The package stream-weywot-postcss-loader-version was found to contain malicious code...