Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm)

The package com.microsoft.mixedreality.toolkit.standardassets was found to contain malicious code...