MAL-2025-40318 Malicious code in yapaint (npm)

The package yapaint was found to contain malicious code...