A new worm that targets Yahoo e-mail users is on the loose, taking advantage of an JavaScript flaw, a security company has warned.

CNET

(Note: As the updated article states, Yahoo has taken action to prevent further propogation)