fixes malicious code from package flatmap-stream
fixes malicious code from package flatmap-stream

closes #1015

yakyak/yakyak,averissimo/yakyak,averissimo/yakyak,averissimo/yakyak,yakyak/yakyak,yakyak/yakyak