Malicious code in yuilib-css (npm)

The package yuilib-css was found to contain malicious code...