Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)

The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...

MAL-2025-17334 Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)

The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...

Malicious Package

Overview firebase-extensions is a malicious package. It uses a preinstall script to steal environment variables. Remediation Avoid using all malicious instances of the firebase-extensions package. Credit: Snyk Research...