Malicious code in yyf-di (npm)

The package yyf-di was found to contain malicious code...