Malicious code in ui5-mobx-state-tree (npm)

The package ui5-mobx-state-tree was found to contain malicious code...