The yakuza0 npm package versions 2.23.40 and 2.23.40-beta.3 contain malicious code that performs outbound network calls to a hardcoded, non-standard host. The code includes runtime fingerprinting of the host environment and uses shell command execution combined with HTTP requests to attacker-controlled endpoints. This behavior indicates potential exfiltration of data and remote command execution risks.