Local reference
Suspicious dependency
Inferred
Mal-ecule
O(C)H₈(Cm₅CrDb₉Os₂Po₂TiU₇)Md₃(Pa₇)
Referenced by 3 samples
Objectives
notable severity, 92% confident.
command-and-control/dropper/execution
Browser cache data marker
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References current page URL
notable severity, 100% confident.
data/control-flow
Augmented assignment inside while loop
notable severity, 93% confident.
data/source/property
Runs a high-iteration JavaScript loop
notable severity, 90% confident.
os/privilege
License validation function name
notable severity, 90% confident.
os/sysinfo/platform
Reads browser identity or display input
notable severity, 90% confident.
time/schedule
Contains at least six setTimeout calls
Metadata
notable severity, 90% confident.
encoded-payload
Percent-encoded content decoded
notable severity, 90% confident.
package
Package uses git hooks tooling
notable severity, 95% confident.
package/manifest
Package declares a jsDelivr CDN entry
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
20 of 39 traits shown
Identity
| SHA-256 | 0cb1def09732779dc424749cdc9973aad204b4f6e5eafcae5ed82f93f9bd05e3 |
|---|---|
| Canonical SHA-256 | 01d1894fb0541629fe04275336be20c3ca13b6b25f0ada6abff866ddc088b583 |
| Filename | apexcharts-6.7.0.tgz |
| Package | apexcharts |
| Version | 6.7.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/apexcharts/-/apexcharts-6.7.0.tgz |
Timeline
| First seen | 5 Aug 2026 13:22 UTC |
|---|---|
| First analyzed | 5 Aug 2026 13:24 UTC |
| Last analyzed | 5 Aug 2026 13:24 UTC |
| Last updated | 5 Aug 2026 13:22 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 1e491 |
Not seeing what you expected? Let us know