Malicious code in web-assets (npm)

The package web-assets was found to contain malicious code...