Malicious code in ch-react-dropdown (npm)

The package ch-react-dropdown was found to contain malicious code...