Malicious code in com.unity.xr.arkit (npm)

The package com.unity.xr.arkit was found to contain malicious code...