The npm package 'finalmoyloyt' has been identified as containing malicious code. This discovery was reported by Amazon Inspector and cataloged in the GCVE database. No specific versions are listed as affected, and there is no CVSS score or detailed technical impact provided. There is no evidence of active exploitation in the wild at this time.