yar

Denial of Service in yar

@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses

Missing Encryption of Sensitive Data in yarn

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

@nyariv/sandboxjs has a Sandbox Escape vulnerability

Path Traversal in Yarn

Malicious code in yargs-parxe (npm)

Malicious code in yarn-design-system-rc-tooltip (npm)

Yarn Improper link resolution before file access (Link Following)

@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE

Yarn untrusted search path vulnerability

Malicious code in yarn-design-system-choicesjs-stencil (npm)

Malicious code in yarn-design-system-fonts (npm)

@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)

@nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution

yargs-parser Vulnerable to Prototype Pollution

Malicious code in yarsg (npm)

@nyariv/sandboxjs has a Sandbox Escape issue

Malicious code in yarn-design-system-flatpickr (npm)

Malicious code in yarn-design-system-logos (npm)

Malicious code in yarn-design-system-rc-input-number (npm)

Malicious code in vidyard-player-sdk (npm)

Malicious code in example-yarn-package (npm)

Malicious code in yarn-test-git-repo (npm)

Malicious code in yarn-design-system-react-select (npm)

TOCTOU Race Condition in Yarn

Malicious code in xlhepkvdnjmyaruo (npm)

Malicious code in yargs-js (npm)