Malicious code in react-choose (npm)

The package react-choose was found to contain malicious code...