Malicious code in vas_extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...