Malicious code in stylelint-function-url-no-domain (npm)

The package stylelint-function-url-no-domain was found to contain malicious code...