Malicious code in ch-react-menu (npm)

The package ch-react-menu was found to contain malicious code...