MAL-2025-17334 Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)

The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)

The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...

Malicious Package

Overview firebase-extensions is a malicious package. It uses a preinstall script to steal environment variables. Remediation Avoid using all malicious instances of the firebase-extensions package. Credit: Snyk Research...