The npm package 'adorn' versions 0.1.0 and 0.1.1 were found to contain malicious code. However, detailed analysis by Amazon Inspector did not observe any install-time or import-time malicious behavior such as network fetches, shell execution, secret path reads, environment variable scraping, or obfuscated payloads. No active exploitation or harmful lifecycle scripts were detected in these versions.