MAL-2025-40280 Malicious code in yankee-ugli-vfmj (npm)

The package yankee-ugli-vfmj was found to contain malicious code...