Malicious code in query-hydra-postcss-loader-config (npm)

The package query-hydra-postcss-loader-config was found to contain malicious code...