Malicious code in com.google.android.appbundle (npm)

The package com.google.android.appbundle was found to contain malicious code...