Malicious code in appointment-widget (npm)

The package appointment-widget was found to contain malicious code...