Malicious code in flat-glob (npm)

The package flat-glob was found to contain malicious code...