Malicious code in cb-components (npm)

The package cb-components was found to contain malicious code...