The npm package @al-ui/useappinsights versions 1.0.0 and 1.0.1 contain malicious code. This is identified as a malicious package incident rather than a traditional software vulnerability. There is no CVSS score or detailed technical description available. No known exploits in the wild have been reported. No patch or remediation information is provided.