The npm package yanti-sambel17-riris was identified as containing malicious code according to Amazon Inspector findings. No specific details about the nature of the malicious code or its impact are provided. There are no known exploits in the wild or CVSS score available for this threat.