Malicious code in ch-react-actionmenu (npm)

The package ch-react-actionmenu was found to contain malicious code...