The npm package 'ect-987654-ctf' versions 0.0.5, 0.0.7, 0.0.9, 0.0.10, and 0.0.12 contains malicious code. It communicates with domains linked to malicious activity and executes commands associated with harmful behavior. There is no CVSS score or known exploit in the wild reported for this package.