Malicious code in callback-apex-ursa-toml (npm)

The package callback-apex-ursa-toml was found to contain malicious code...