Malicious code in yyf-reflection (npm)

The package yyf-reflection was found to contain malicious code...