Malicious code in react-google-calendar-events (npm)

The package react-google-calendar-events was found to contain malicious code...