MAL-2026-14102

Dashboard / Malicious Package / MAL-2026-14102

MAL-2026-14102

Summary: Malicious code in @siwatfa/yorn (npm)

Details: Source: amazon-inspector (95a80ba4dd71c991ac9dfc64dd9954a5ad7a83d2b67cc7807dde863872f9324b) The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware (dc765ce6cbae92d77218173fda23eca5505d5dc8342010b79f87ad721aac882a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References: https://github.com/advisories/GHSA-3rxm-r82c-h2f9, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.43, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.40, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.3, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.26, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.81, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.67, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.48, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.31, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.74, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.1, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.77, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.36, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.47, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.25, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.73, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.15, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.4, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.30, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.35, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.84, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.14, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.33, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.7, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.28, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.21, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.3, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.39, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.33, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.12, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.18, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.4, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.32, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.2, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.103, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.5, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.23, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.42, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.90, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.24, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.40, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.38, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.0, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.39, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.35, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.20, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.44, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.79, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.8, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.56, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.37, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.9, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.41, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.49, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.63, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.10, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.100, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.64, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.92, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.6, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.1, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.34, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.76, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.82, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.17, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.51, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.58, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.24, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.19, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.22, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.83, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.18, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.13, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.80, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.12, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.22, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.42, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.68, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.46, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.45, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.95, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.75, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.29, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.7, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.93, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.27, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.72, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.102, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.96, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.101, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.52, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.20, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.27, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.19, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.91, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.60, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.61, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.65, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.44, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.45, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.25, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.15, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.17, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.2, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.62, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.6, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.38, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.85, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.23, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.98, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.99, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.87, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.11, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.31, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.59, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.50, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.88, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.16, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.69, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.8, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.57, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.16, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.36, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.43, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.32, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.11, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.5, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.41, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.13, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.14, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.89, https://www.npmjs.com/package/@siwatfa/yorn/v/0.0.26, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.71, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.70, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.86, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.21, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.28, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.53, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.66, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.94, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.97, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.30, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.55, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.78, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.29, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.10, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.34, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.54, https://www.npmjs.com/package/@siwatfa/yorn/v/1.0.9