Malicious code in web-auth-client (npm)

The package web-auth-client was found to contain malicious code...