Malicious code in merchant-newsletter-widget (npm)

The package merchant-newsletter-widget was found to contain malicious code...