Malicious code in config-command-apex-phoebe (npm)

The package config-command-apex-phoebe was found to contain malicious code...