Malicious code in msg-calendar (npm)

The package msg-calendar was found to contain malicious code...