The farikku-util package in the npm ecosystem has been identified as containing malicious code in multiple specific versions (1.0.0, 1.0.1, 1.0.2, 1.0.6, 1.0.8, and 1.0.10). This classification is based on data from Amazon Inspector and is cataloged under OSV ID MAL-2026-2762 and GHSA-98g7-3vh4-ww58. There is no CVSS score or detailed technical description of the malicious behavior available. No patch or fix information is provided, and no known exploits are reported in the wild.

Use of the affected versions of farikku-util may lead to the execution of malicious code, potentially compromising the security and integrity of systems that include this package. The exact impact depends on the nature of the malicious code, which is not detailed in the source data. There is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance. Until a fixed version or official remediation is available, avoid using the affected versions of farikku-util. Consider removing or replacing the package if possible.