The npm package 'epic-file-upload' versions 0.0.1-security and 1.0.0 were found to contain malicious code. This indicates that these specific versions of the package include harmful functionality that could compromise systems using them. No CVSS score or detailed technical impact information is provided.