Malicious code in com.microsoft.altspacevr_uploader (npm)

The package com.microsoft.altspacevruploader was found to contain malicious code...