Open-source atomic malware analysis

Analyze another

@rolldown/pluginutils 1.0.0-rc.6

UNKNOWN
Verdict: BENIGN
SHA256: 0d936768d1959f09ab8e4cd73ac8d04377fc29b215d6a87d283702ca63c1082b
“A utility library for building flexible, composable filter expressions that can be used in plugin hook filters of Rolldown/Vite/Rollup/Unpl…”
Mal-ecule
H₂(Cm₂Db₂)Md(Pa₅)
Size 6.1 KB download
First seen 10 days ago
Analyzed 9 days ago
Package pkg:npm/@rolldown/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/archive Archive member path uses backslash separators
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
baseline severity, 95% confident.
file/profile Contains a UI language-label table
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 0d936768d1959f09ab8e4cd73ac8d04377fc29b215d6a87d283702ca63c1082b
Canonical SHA-256 0088b02dca63c47b273a140d0a3944bdc6dc2eb765fff0ca98e3c3a2786b3a5a
Filename [email protected]
Package @rolldown/pluginutils
Version 1.0.0-rc.6
PURL pkg:npm/@rolldown/[email protected]

Origin

Source x
Feed wolfi.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.6.tgz

Timeline

First seen 16 Aug 2026 22:08 UTC
First analyzed 16 Aug 2026 22:07 UTC
Last analyzed 17 Aug 2026 00:55 UTC
Last updated 17 Aug 2026 00:54 UTC

Labeling

Label unknown
Traits version 298c2