Malicious code in @zalastax/nolb-react-pu (npm)

The package @zalastax/nolb-react-pu was found to contain malicious code...