The npm package 'rhynpm' was found to contain malicious code. Multiple versions of the package, including 1.0.0 through 1.0.4 and versions starting from 0.0.1-0, are affected. No official patch or remediation guidance is provided in the available data. There is no evidence of known exploits in the wild at this time.