The npm package '@eqder/bird' versions 10.0.0, 12.0.0, and 13.0.0 have been identified as containing malicious code. The package executes commands associated with malicious behavior, making it a security risk for users who install these specific versions.