The npm package 'model-poc-suhail' versions 1.0.4, 1.0.5, 1.0.9, and 1.0.14 contain malicious code. This code communicates with a domain associated with malicious activity, indicating potential unauthorized data transmission or control. No CVSS score is available for this threat.