Malicious code in com.unity.xr.legacyinputhelpers (npm)

The package com.unity.xr.legacyinputhelpers was found to contain malicious code...