Malicious code in yelp-react-component-button (npm)

The package yelp-react-component-button was found to contain malicious code...