Open-source atomic malware analysis

Analyze another

nanoid 3.1.12

UNKNOWN
Verdict: BENIGN
SHA256: 001ddecbf62b1e58ad335bd0e5bc65480ffba4e64d63cb6b5cf18f924cd64780
“A tiny (108 bytes), secure URL-friendly unique string ID generator”
Mal-ecule
H₂(OsPo)Md₂(Pa₅)
Size 11.8 KB download
First seen 27 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 72% confident.
os/random Node.js cryptographic random-value generation
notable severity, 80% confident.
process/io References Node.js stdout stream
baseline severity, 90% confident.
data Constructs a Uint8Array buffer
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
baseline severity, 80% confident.
os/env Access environment variables

Metadata

notable severity, 80% confident.
file/profile Contains a Cyrillic script sequence
notable severity, 90% confident.
package/manifest package.json omits name field
notable severity, 85% confident.
package/quality Tiny CommonJS stub exports object literal
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
component severity, 84% confident.
build Member under bin/native/prebuilds dir
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 001ddecbf62b1e58ad335bd0e5bc65480ffba4e64d63cb6b5cf18f924cd64780
Filename [email protected]
Package nanoid
Version 3.1.12
PURL pkg:npm/[email protected]

Origin

Source x
Feed open-vsx.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/nanoid/-/nanoid-3.1.12.tgz

Timeline

First seen 2 Aug 2026 00:23 UTC
First analyzed 2 Aug 2026 00:25 UTC
Last analyzed 26 Aug 2026 07:32 UTC
Last updated 26 Aug 2026 07:32 UTC

Labeling

Label unknown
Traits version 72034