Malicious code in yelp_sitrep (npm)

The package yelpsitrep was found to contain malicious code...