The npm package gunpowder-ghost-curse was identified as containing malicious code. No specific details about the nature of the malicious code or its impact are provided. There are no affected versions explicitly stated, and no known exploits in the wild have been reported.