Malicious code in avalon-plugin-physics3d (npm)

The package avalon-plugin-physics3d was found to contain malicious code...