Malicious code in @subscription-info/bff (npm)

The package @subscription-info/bff was found to contain malicious code...