The npm package '@adobesign/as-dev-tools' versions 99.9.9 and 99.9.10 have been identified as malicious. The package communicates with domains linked to malicious activity and executes commands associated with harmful behavior. There is no CVSS score available for this threat.