Malicious code in vendor-kendo (npm)

The package vendor-kendo was found to contain malicious code...