Malicious code in @zalastax/nolb-_react-m (npm)

The package @zalastax/nolb-react-m was found to contain malicious code...