Npm malware problem, yunohost affected?

Discuss

Are we affected by the npm security disaster?
And how can this be tested?

https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages

Perhaps, it totally depends on the apps you installed on your server

YunoHost itself is not affected

ah ok, how to test it?
or is there a list of affected apps?

I don’t know and no

Someone have to dig that and that will not be me as I’m very tired those days