The npm package react-dnd-14 version 99.9.1 has been identified as containing malicious code. This package communicates with a domain linked to malicious activity, indicating it may be used to perform harmful operations. No CVSS score or detailed impact analysis is provided. There is no information about available patches or remediation.