https://csn.net4me.net/cyber_security_10872.html
Arbitrary File Overwrite in yarn package for dependency management