Running the yorn CLI executes an obfuscated loader and opaque V8 bytecode payload. No install-time attack surface or concrete malicious action was readable.
Package source references a known benign dynamic code generation pattern.
dist/load.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
dist/skills/screenshot/scripts/take_screenshot.pyView on unpkgPackage ships high-entropy non-source blobs.
dist/skills/theme-factory/theme-showcase.pdfView on unpkgPackage ships an opaque 15.5 MB V8 bytecode payload, documented as dist/yorn.jsc.
README.mdView on unpkg · L77Opaque loader/bytecode execute when the user invokes yorn, preventing static review of its effective behavior.
package.jsonView on unpkg · L6Opaque loader/bytecode execute when the user invokes yorn, preventing static review of its effective behavior.
package.jsonView on unpkg · L21Package source references a known benign dynamic code generation pattern.
dist/load.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
dist/skills/screenshot/scripts/take_screenshot.pyView on unpkgPackage ships high-entropy non-source blobs.
dist/skills/theme-factory/theme-showcase.pdfView on unpkgPackage ships an opaque 15.5 MB V8 bytecode payload, documented as dist/yorn.jsc.
README.mdView on unpkg · L77Opaque loader/bytecode execute when the user invokes yorn, preventing static review of its effective behavior.
package.jsonView on unpkg · L6Opaque loader/bytecode execute when the user invokes yorn, preventing static review of its effective behavior.
package.jsonView on unpkg · L21