22\r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGP.build(["r-encodi","ng","transfe"],[2,0,1])]&&!t[tGP.build(["ngth",tGP.build(["content-l","e"],[0,1])],[1,0])]}...
L24: `)}function eXo(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`
HighChild Process
Package source references child process execution.
dist/yorn.cjsView on unpkg · L22 11${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.refusal??null},finish_reason:i,index:r,logprobs:n}}),crea...
L13: Content-Disposition: form-data; name="`;return e.forEach((e,t)=>"string"==typeof e?r.push(n+Py(t)+`"\r
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGP.build(["r-encodi","ng","transfe"],[2,0,1])]&&!t[tGP.build(["ngth",tGP.build(["content-l","e"],[0,1])],[1,0])]}...
L24: `)}function eXo(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/yorn.cjsView on unpkg · L11 2globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,T,w,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eNA(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eMk(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L11: ${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.
HighCredential Exfiltration
Source combines credential-like environment material and outbound requests; review data flow before blocking.
dist/yorn.cjsView on unpkg · L2 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/yorn.cjs:
`),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGP.build(["r-encodi","ng","transfe"],[2,0,1])]&&!t[tGP.build(["ngth",tGP.build(["content-l","e"],[0,1])],[1,0])]}...
`)}function eXb(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function eXh(e,t,i,r){let n=eXc(t),s=eXs(n),l=eXs(eXo(e.content)),a=s,o=0,u=0,d=i?.se...
`){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXB(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip...
--api-key <key> API key (defaults to env vars)
# Print a prov
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/yorn.cjsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/yorn.cjs:
`)),r.push(`--${i}--`),new t(r,{type:tGP.build(["mult","ipart/f","dary=",tGP.build(["boun","data; "],[1,0]),"orm-"],[0,1,4,3,2])+i})}function eM3(e){let t=e.match(/\bfilename=("(.*...
AZURE_OPENAI_BASE_URL - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com)
YORN_SHARE_VIEWER_URL - Base URL for /share command (default: https://pi.dev/session/)
`),a=t.content.some(e=>"image"===e.type),d={role:"tool",content:ePB(l.length>0?l:a?tGP.build(["d imag","(see at","tache","e)"],[1,2,0,3]):tGP.build(["(no tool ","output)"],[0,1])),...
</html>`}function te3(e){return te2({title:tGP.build(["on succe"
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/yorn.cjsView on unpkg 7`),u.push(`\r
L8: `)}u.push(null)}),u}async function eNA(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eMk(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L11: ${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.refusal??null},finish_reason:i,index:r,logprobs:n}}),crea...
L13: Content-Disposition: form-data; name="`;return e.forEach((e,t)=>"string"==typeof e?r.push(n+Py(t)+`"\r
...
L22: \r
L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGP.build(["r-encodi","ng
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/yorn.cjsView on unpkg · L7 2globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,T,w,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eNA(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eMk(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L11: ${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/yorn.cjsView on unpkg · L2 2Trigger-reachable credential exfiltration chain: manifest.bin -> dist/yorn.cjs
L2: globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,T,w,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...
L4: `),u.push(e),u.push(`\r
...
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eNA(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eMk(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L11: ${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/yorn.cjsView on unpkg · L2 7Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/yorn.cjs
L7: `),u.push(`\r
L8: `)}u.push(null)}),u}async function eNA(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re...
L9: ${eMk(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type
...
L11: ${eMk(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments
L12: ${eMk(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.refusal??null},finish_reason:i,index:r,logprobs:n}}),crea...
L13: Content-Disposition: form-data; name="`;return e.forEach((e,t)=>"string"==typeof e?r.push(n+Py(t)+`"\r
...
L22: \r
L23: `),n=!1,
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/yorn.cjsView on unpkg · L7 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/yorn.cjsView on unpkg 1#!/usr/bin/env node
L2: globalThis.__yorn_dynamic_import = (m) => import(m);
L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,T,w,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/yorn.cjsView on unpkg · L1 •path = dist/yorn.cjs
kind = oversized_source_file
sizeBytes = 7646833
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/yorn.cjsView on unpkg •path = dist/yorn.cjs
kind = oversized_cli_entrypoint
sizeBytes = 7646833
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/yorn.cjsView on unpkg