Yarnpkg is a technology platform tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed February 5, 2026; most recent activity February 6, 2026.
Fedora has released updates for yarnpkg to address a critical prototype pollution vulnerability identified as CVE-2025-13465, which was published on January 21, 2026. The updates include regenerating the vendor tarball…