Malicious code in yandex-useragent (npm)

The package yandex-useragent was found to contain malicious code...