Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...