A package update broke (maybe compromised) all of the React pipelines worldwide

almost 9e6 weekly downloads on npm but only 114 stars on github; makes me wonder if this was just a troll by the author.

Seems to also contain malicious code :(

Being a developer in 2021: "Me too!"[1]

Fucking hell...