Malicious code in com.unity.xr.arcore (npm)

The package com.unity.xr.arcore was found to contain malicious code...