Malicious code in @help_api/config (npm)

The package @helpapi/config was found to contain malicious code...