Malicious code in yt-player-angular-v9 (npm)

The package yt-player-angular-v9 was found to contain malicious code...