Open-source atomic malware analysis

Analyze another

orchestra/canvas v9.2.2

UNKNOWN
Verdict: BENIGN
SHA256: 0fd523ef14514292fbd4b06873990cfa6a2a97cf94fb06ad79bf6b5164644a5f
“Code Generators for Laravel Applications and Packages”
Mal-ecule
H(Cm)Md₂(Pa₂)
Size 52.0 KB download
First seen 23 days ago
Analyzed 1 day ago
Package pkg:composer/orchestra/[email protected]
Installs 22,337,926
Ecosystem composer
Source codeload.github.com

Referenced by 5 samples

Objectives

component severity, 96% confident.
credential-access/theft Password field name in structured data

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
component severity, 85% confident.
fs/path/sensitive .env filename literal

Metadata

notable severity, 85% confident.
package Composer post-autoload command hook
notable severity, 99% confident.
package/testing/presence Calls test() declaration
baseline severity, 90% confident.
package/testing/harness PHPUnit assertion method call

Identity

SHA-256 0fd523ef14514292fbd4b06873990cfa6a2a97cf94fb06ad79bf6b5164644a5f
Canonical SHA-256 01a57343d8d4ef6304f55c2e4f1db69174da7deb23ed25cd19bdf24beeb532ca
Filename [email protected]
Package orchestra/canvas
Version v9.2.2
PURL pkg:composer/orchestra/[email protected]

Origin

Source x
Feed packagist.org
Ecosystem composer
Domain github.com
URL https://codeload.github.com/orchestral/canvas/legacy.zip/002d948834c0899e511f5ac0381669363d7881e5

Timeline

First seen 2 Aug 2026 04:38 UTC
First analyzed 2 Aug 2026 04:40 UTC
Last analyzed 24 Aug 2026 14:20 UTC
Last updated 24 Aug 2026 14:25 UTC

Labeling

Label unknown
Traits version fb1c6