The npm package 'web3-1-4' versions 5.0.8 and 5.0.9 have been identified as containing malicious code. This malicious behavior involves executing commands associated with harmful activities. The detection was made by Amazon Inspector and the OpenSSF Package Analysis project. There is no CVSS score or detailed impact analysis available. No known exploits in the wild have been reported as of the publication date.