The npm package epic-gulp-utils was identified as containing malicious code. Two specific versions, 0.0.1-security and 1.0.0, are affected. No CVSS score or detailed technical impact information is provided. There is no indication of known exploits in the wild or available patches.