The npm package 'stark-recurser' versions 5.0.8 and 5.0.9 contain malicious code that executes commands associated with malicious behavior. This package has been identified as malicious by the OpenSSF Package Analysis project and Amazon Inspector. There is no CVSS score available, and no known exploits in the wild have been reported as of the published date.