We have noticed that /tmp/yan process is utilizing high CPU, please let know why this is happening?
Let me know if you need any further details.
This is related to attack by crytocurrency minners. you can check details on article https://labitacoranet.wordpress.com/2018/05/16/forensic-analysis-of-a-cryptocurrency-mining-attack-i....
You need to first check all crontab and clean it.
for /tmp/yarn , check yarn-env.sh and remove any curl.