Malicious code in venus-postcss-loader-halley-tardigrade (npm)

The package venus-postcss-loader-halley-tardigrade was found to contain malicious code...