311`)||"";n.block.thinking=s||o||n.block.thinking,n.block.thinkingSignature=JSON.stringify(e),a.set(e.id,n.block),i.push({type:tzT.build(["thinki","ng_end"],[0,1]),contentIndex:n.cont...
L312: `),n=e.input.includes("image")?r.content.filter(e=>"image"===e.type):[],s=t.length>0,l=n.length>0,a=tbR(e.id),o=s?eUe(t):l?tzT.build(["image)","(see"," attached "],[1,2,0]):"",u=n....
L313: `).trim();if(!t)return;if("[DONE]"===t)return eau;let i=JSON.parse(t);if(!tpy(i)||!Array.isArray(i.choices))throw Error(tzT.build(["Inval","id Mis","tral s","ming ev","ent","trea"]...
...
L326: `)}if(e)break}if(r.trim()){let e=tmz(r);tzy.evalInvariant(10182)&&e&&(yield e)}}finally{i.releaseLock()}}function tmz(e){let t=e.split(`
L327: `).find(e=>e.startsWith("data:"))?.slice(5).trim();if(t&&"[DONE]"!==t)try{ret
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/yorn.cjsView on unpkg · L311 2globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eDY(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eU2(e)}`);if(tzy.evalInvariant(811)&&null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[tzT.build([tzT.build(["content-l","en"],[0,1]...
L24: `)
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/yorn.cjsView on unpkg · L2 2globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eDY(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eU2(e)}`);if(tzy.evalInvariant(811)&&null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[tzT.build([tzT.build(["content-l","en"],[0,1]...
L24: `)
CriticalClipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/yorn.cjsView on unpkg · L2 2Trigger-reachable chain: manifest.bin -> dist/yorn.cjs
L2: globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eDY(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eU2(e)}`);if(tzy.evalInvariant(811)&&null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[t
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/yorn.cjsView on unpkg · L2 22\r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[tzT.build([tzT.build(["content-l","en"],[0,1]...
L24: `)}function e0$(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`
HighChild Process
Package source references child process execution.
dist/yorn.cjsView on unpkg · L22 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/yorn.cjs:
`),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[tzT.build([tzT.build(["content-l","en"],[0,1]...
`)}function e0H(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function e0W(e,t,i,r){let n=e0q(t),s=e0F(n),l=e0F(e0$(e.content)),a=s,o=0,u=0,d=i?.se...
`){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function e2a(e,t){return Kh.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip...
--api-key <key> API key (defaults to env vars)
# Print a prov
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/yorn.cjsView on unpkg 311`)||"";n.block.thinking=s||o||n.block.thinking,n.block.thinkingSignature=JSON.stringify(e),a.set(e.id,n.block),i.push({type:tzT.build(["thinki","ng_end"],[0,1]),contentIndex:n.cont...
L312: `),n=e.input.includes("image")?r.content.filter(e=>"image"===e.type):[],s=t.length>0,l=n.length>0,a=tbR(e.id),o=s?eUe(t):l?tzT.build(["image)","(see"," attached "],[1,2,0]):"",u=n....
L313: `).trim();if(!t)return;if("[DONE]"===t)return eau;let i=JSON.parse(t);if(!tpy(i)||!Array.isArray(i.choices))throw Error(tzT.build(["Inval","id Mis","tral s","ming ev","ent","trea"]...
...
L326: `)}if(e)break}if(r.trim()){let e=tmz(r);tzy.evalInvariant(10182)&&e&&(yield e)}}finally{i.releaseLock()}}function tmz(e){let t=e.split(`
L327: `).find(e=>e.startsWith("data:"))?.slice(5).trim();if(t&&"[DONE]"!==t)try{ret
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/yorn.cjsView on unpkg · L311 2globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eDY(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eU2(e)}`);if(tzy.evalInvariant(811)&&null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans"],[1,0])],[1,0])]&&!t[tzT.build([tzT.build(["content-l","en"],[0,1]...
L24: `)
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/yorn.cjsView on unpkg · L2 2Trigger-reachable credential exfiltration chain: manifest.bin -> dist/yorn.cjs
L2: globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eDY(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eU2(e)}`);if(tzy.evalInvariant(811)&&null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tzT.build(["coding",tzT.build(["fer-en","trans
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/yorn.cjsView on unpkg · L2 311Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/yorn.cjs
L311: `)||"";n.block.thinking=s||o||n.block.thinking,n.block.thinkingSignature=JSON.stringify(e),a.set(e.id,n.block),i.push({type:tzT.build(["thinki","ng_end"],[0,1]),contentIndex:n.cont...
L312: `),n=e.input.includes("image")?r.content.filter(e=>"image"===e.type):[],s=t.length>0,l=n.length>0,a=tbR(e.id),o=s?eUe(t):l?tzT.build(["image)","(see"," attached "],[1,2,0]):"",u=n....
L313: `).trim();if(!t)return;if("[DONE]"===t)return eau;let i=JSON.parse(t);if(!tpy(i)||!Array.isArray(i.choices))throw Error(tzT.build(["Inval","id Mis","tral s","ming ev","ent","trea"]...
...
L326: `)}if(e)break}if(r.trim()){let e=tmz(r);tzy.evalInvariant(10182)&&e&&(yield e)}}finally{i.releaseLock()}}function tmz(e){let t=e.split(`
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/yorn.cjsView on unpkg · L311 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/yorn.cjsView on unpkg •matchType = normalized_sha256
matchedPackage = @pilllesss/yorn@1.0.262
matchedPath = dist/yorn.cjs
matchedIdentity = npm:QHBpbGxsZXNzcy95b3Ju:1.0.262
similarity = 1.000
summary = normalized source hash matched finalized malicious source
HighKnown Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/yorn.cjsView on unpkg •matchType = malicious_source_fingerprint_signature
signature = f5544ecd80b66e25
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @pilllesss/yorn@1.0.262
matchedPath = dist/yorn.cjs
matchedIdentity = npm:QHBpbGxsZXNzcy95b3Ju:1.0.262
similarity = 1.000
shingleOverlap = 3
summary = package final verdict is malicious
HighKnown Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/yorn.cjsView on unpkg 1#!/usr/bin/env node
L2: globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,h,b,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,P,M,D,L,F,U,B,$,j,G,q,H,W,V,K,Y,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eh,eb,ep,em,ef,eg,e_,ey,eE,eS,ev...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/yorn.cjsView on unpkg · L1 •path = dist/yorn.cjs
kind = oversized_source_file
sizeBytes = 8073073
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/yorn.cjsView on unpkg •path = dist/yorn.cjs
kind = oversized_cli_entrypoint
sizeBytes = 8073073
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/yorn.cjsView on unpkg