Malicious code in cosmiconfig-build-javascript-ini (npm)

The package cosmiconfig-build-javascript-ini was found to contain malicious code...