The npm package 'app_storefront_core' version 99.0.0 has been identified as containing malicious code. It communicates with domains linked to malicious activity and executes commands associated with harmful behavior. This package poses a security risk to users who install or use this specific version.