Running the yorn CLI executes an obfuscated loader and opaque V8 bytecode payload. No install-time execution or confirmed concrete exfiltration chain was established.
Package source references a known benign dynamic code generation pattern.
dist/load.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
dist/skills/screenshot/scripts/take_screenshot.pyView on unpkgPackage ships high-entropy non-source blobs.
dist/skills/theme-factory/theme-showcase.pdfView on unpkgThe CLI loader executes heavily obfuscated code through Function at runtime.
dist/load.cjsView on unpkg · L2The shipped 15 MB dist/yorn.jsc V8 bytecode payload is not source-auditable; README confirms intentional obfuscation and bytecode compilation.
README.mdView on unpkg · L78Package source references a known benign dynamic code generation pattern.
dist/load.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
dist/skills/screenshot/scripts/take_screenshot.pyView on unpkgPackage ships high-entropy non-source blobs.
dist/skills/theme-factory/theme-showcase.pdfView on unpkgThe CLI loader executes heavily obfuscated code through Function at runtime.
dist/load.cjsView on unpkg · L2The shipped 15 MB dist/yorn.jsc V8 bytecode payload is not source-auditable; README confirms intentional obfuscation and bytecode compilation.
README.mdView on unpkg · L78