Malicious code in xigua-date-qygr (npm)

The package xigua-date-qygr was found to contain malicious code...