Material theme was deleted due to malicious activity by Microsoft

Continuing from this https://news.ycombinator.com/item?id=43178831

Can we get explanation as to what happened?
Should we take steps to mitigate potential compromise?

I did a quick analysis of the extensions code and found it connecting to authors CMS to get latest change log which is sketchy but not malicious