The npm package hiro-experience-map was identified as containing malicious code. No specific details about the nature of the malicious code, its behavior, or impact are provided. There is no information about affected versions or known exploits in the wild.