Malicious code in xml-asthenosphere-less-loader-graphql (npm)

The package xml-asthenosphere-less-loader-graphql was found to contain malicious code...