Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm)Md₂(Pa₃)
Referenced by 1 sample
Micro-behaviors
notable severity, 92% confident.
communications/http/services
AWS EC2 user-data call parameter
component severity, 90% confident.
communications/url
Encoded URL documentation context
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 85% confident.
package/quality
Package has multiple entry points
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 05a7b0e28486ae3ac96d3a413e61168343bd6a5023a2082dba6a36a0c2bfce6d |
|---|---|
| Filename | plugins-1.77.0.tgz |
| Package | @oxlint/plugins |
| Version | 1.77.0 |
| PURL | pkg:npm/@oxlint/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@oxlint/plugins/-/plugins-1.77.0.tgz |
Timeline
| First seen | 9 Aug 2026 18:10 UTC |
|---|---|
| First analyzed | 9 Aug 2026 18:13 UTC |
| Last analyzed | 9 Aug 2026 18:13 UTC |
| Last updated | 9 Aug 2026 18:10 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 46d16 |
Not seeing what you expected? Let us know