Malicious code in com.microsoft.mixedreality.worldlockingsamples (npm)

The package com.microsoft.mixedreality.worldlockingsamples was found to contain malicious code...