The npm package 'polycard' version 100.0.0 has been identified as containing malicious code. It communicates with a domain linked to malicious activity and executes commands associated with harmful behavior. This package is flagged as malicious by multiple sources including Amazon Inspector and the OpenSSF Package Analysis project.