Malicious code in avalon-plugin-opengl (npm)

The package avalon-plugin-opengl was found to contain malicious code...