Malicious code in timber-ui (npm)

The package timber-ui was found to contain malicious code...