Malicious code in flex-config (npm)

The package flex-config was found to contain malicious code...