“Safe defaults for cssnano which require minimal configuration.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
Md₂(Pa₄)
Referenced by 7 samples
- suspicious github.com-johnpbloch-wordpress-core-v0.0.0-20260811051942-0c0eb7bcb432.zip fetched
- benign airflow-3-3.1.8-r0.apk fetched
- benign ambiscale-activity-manager-1.2.0.zip fetched
- suspicious github.com-johnpbloch-wordpress-core-v0.0.0-20260807195653-5bb8b8b0ea4c.zip fetched
- suspicious github.com-WordPress-WordPress-v0.0.0-20260717090949-04efa51ced32.zip fetched
- benign github.com-kausaltech-kausal-paths-v0.0.0-20260818214151-5a69433bb69a.zip fetched
- benign docker.io_library_wordpress_php8.5-fpm.tar.xz fetched
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
Micro-behaviors
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 85% confident.
package/dependencies
Package has at least eight runtime deps
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 006c17f60247370db9ee052e13918c3a614dfafa17bde45f5d86a23075f1200c |
|---|---|
| Filename | [email protected] |
| Package | cssnano-preset-default |
| Version | 7.0.10 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | wordpress.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/cssnano-preset-default/-/cssnano-preset-default-7.0.10.tgz |
Timeline
| First seen | 11 Aug 2026 20:14 UTC |
|---|---|
| First analyzed | 11 Aug 2026 20:16 UTC |
| Last analyzed | 23 Aug 2026 23:21 UTC |
| Last updated | 23 Aug 2026 23:24 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 3bd52 |
Not seeing what you expected? Let us know