The npm package 'epic-freight' versions 0.0.1-security and 1.0.0 were found to contain malicious code. This indicates that these specific versions of the package include harmful functionality that could compromise systems using them. There is no CVSS score available for this threat, and no known exploits in the wild have been reported. No patch or remediation information is provided.