Malicious code in yyf-components (npm)

The package yyf-components was found to contain malicious code...