Malicious code in @frozen-ui/picker (npm)

The package @frozen-ui/picker was found to contain malicious code...