Local reference
Suspicious dependency
Inferred
Mal-ecule
H(F)Md₂(BkPa)
Referenced by 10 samples
- benign github.com-0chain-goSdk-v1.7.8.zip fetched
- benign v0.32.2.zip fetched
- benign v0.6.0.zip fetched
- benign v0.42.0-rc.3.zip fetched
- benign v0.9.9-0.20260124013517-8f8f42cba0de.zip fetched
- benign v0.13.0.zip fetched
- benign v0.4.4-0.20260814222900-a849f4e2cd68.zip fetched
- benign v0.20.0.zip fetched
- benign v0.10.1.zip fetched
- benign v1.0.4.zip fetched
Micro-behaviors
notable severity, 90% confident.
fs/file
Recursive directory deletion
Metadata
notable severity, 95% confident.
build
Action input references workflow secret
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
file/profile
English function-word token "the"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
Identity
| SHA-256 | 0077abedf9a4798c50e015045b5cc092b8001be6d994fc59781c4b0d6ae94507 |
|---|---|
| Filename | [email protected] |
| Package | go.uber.org/multierr |
| Version | v1.8.0 |
| PURL | pkg:golang/go.uber.org/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/go.uber.org/multierr/@v/v1.8.0.zip |
Timeline
| First seen | 3 Aug 2026 00:27 UTC |
|---|---|
| First analyzed | 3 Aug 2026 00:29 UTC |
| Last analyzed | 28 Aug 2026 03:23 UTC |
| Last updated | 28 Aug 2026 03:24 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b59b7 |
Not seeing what you expected? Let us know