Malicious code in @zalastax/nolb-react-ug (npm)

The package @zalastax/nolb-react-ug was found to contain malicious code...