The npm package yanti-kue90-riris has been identified as containing malicious code. This discovery was reported by Amazon Inspector and cataloged in the GCVE Database. No specific details about the nature of the malicious code, its behavior, or impact are provided. There are no affected versions explicitly stated, and no known exploits in the wild have been reported as of the publication date.