Malicious code in yelp-react-component-tooltip (npm)

The package yelp-react-component-tooltip was found to contain malicious code...