Malicious code in yyf-url (npm)

The package yyf-url was found to contain malicious code...