Malicious code in babel-plugin-transform-html-template (npm)

The package babel-plugin-transform-html-template was found to contain malicious code...