Malicious code in @cobalt-marketplace/react-stateful-button (npm)

The package @cobalt-marketplace/react-stateful-button was found to contain malicious code...