The npm package xaver-lengko72-ruro was identified as containing malicious code according to Amazon Inspector findings. No specific technical details, affected versions, or exploitation data are provided. There is no CVSS score or detailed impact description available.