Malicious code in react-flyout (npm)

The package react-flyout was found to contain malicious code...