Malicious code in yyf-pipe (npm)

The package yyf-pipe was found to contain malicious code...