Malicious code in url-bar-notification-button (npm)

The package url-bar-notification-button was found to contain malicious code...