Malicious code in via-date-picker-rollup (npm)

The package via-date-picker-rollup was found to contain malicious code...