Malicious code in web-api-mongodb-connection-factory (npm)

The package web-api-mongodb-connection-factory was found to contain malicious code...