The npm package @spicywombat/testprivate was identified as containing malicious code according to Amazon Inspector findings. No specific technical details or impact descriptions are provided in the source data. There is no information about affected versions or active exploitation in the wild.