Malicious code in com.unity.xrtools.module-loader (npm)

The package com.unity.xrtools.module-loader was found to contain malicious code...