why get package after something that is obviously a malicious backdoor?
If I still mamaged any windows host, i would be deploying a remove-package script asap to the entire fleet.
What kind of nonsense are you writing here right now? When the next Linux kernel CVE happens, you'll also delete all the kernels from your fleete because they're a malicious backdoor?
When did y'all stop using some basic sense before writing? -_-
Get-AppxPackage gives you the currently-installed packages for a Windows profile in PowerShell. It does not, in fact, download or install anything.
The whole command I gave gives you the currently installed version of MS Paint so you can see if you're already vulnerable or not.