Malicious code in draft-js-sticker-plugin-vixlet (npm)

The package draft-js-sticker-plugin-vixlet was found to contain malicious code...