The npm package @anchor-ds/core version 99.9.0 was found to contain malicious code. This indicates that the package itself has been compromised or intentionally included harmful functionality. There is no CVSS score or detailed technical analysis available. No known exploits in the wild have been reported. No patch or remediation information is provided.