Malicious code in mz-vue-datepicker (npm)

The package mz-vue-datepicker was found to contain malicious code...