Malicious code in @zalastax/nolb-mn (npm)

The package @zalastax/nolb-mn was found to contain malicious code...