Malicious code in xo-angular-shims-placeholder (npm)

The package xo-angular-shims-placeholder was found to contain malicious code...