Malicious code in react-pdd-calendar-expand (npm)

The package react-pdd-calendar-expand was found to contain malicious code...