Malicious code in yyf-pool (npm)

The package yyf-pool was found to contain malicious code...