Open-source atomic malware analysis

Analyze another

istanbul-lib-hook 1.1.0

UNKNOWN
Verdict: BENIGN
SHA256: 00c34b56cdef4c818bd85877112b8ba9cc76005cf16d9754362840b2e72be8ba
“Hooks for require, vm and script used in istanbul”
Mal-ecule
H₂(DbPo)Md(Pa₂)
Size 4.0 KB download
First seen 27 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 90% confident.
process/interpreter Direct Node.js vm.runInContext() call

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 100% confident.
package/testing Coverage marker family B

Identity

SHA-256 00c34b56cdef4c818bd85877112b8ba9cc76005cf16d9754362840b2e72be8ba
Filename [email protected]
Package istanbul-lib-hook
Version 1.1.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed github-advisories
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-1.1.0.tgz

Timeline

First seen 1 Aug 2026 23:28 UTC
First analyzed 1 Aug 2026 23:30 UTC
Last analyzed 26 Aug 2026 18:34 UTC
Last updated 26 Aug 2026 18:34 UTC

Labeling

Label unknown
Traits version 72034