The npm package 'runtime-only-exploit' was identified as containing malicious code. This discovery was reported by Amazon Inspector and cataloged in the GCVE database. No specific affected versions or technical details such as CVSS scores are provided. There is no indication of active exploitation in the wild at this time.