Malicious code in trezor-link-chrome-extension (npm)

The package trezor-link-chrome-extension was found to contain malicious code...