Open-source atomic malware analysis

Analyze another

wp-cli/wp-config-transformer v1.2.8

UNKNOWN
Verdict: BENIGN
SHA256: 10d9fc57c111c71feb0ad459a587e024c6add3dcb0de376eb10231df65450255
“Programmatically edit a wp-config.php file.”
Mal-ecule
H(F₂)Md
Size 7.8 KB download
First seen 9 days ago
Analyzed 8 days ago
Package pkg:composer/wp-cli/[email protected]
Installs 11,373,807
Ecosystem composer
Source codeload.github.com

Referenced by 2 samples

Micro-behaviors

notable severity, 100% confident.
fs/file/write Calls PHP file_put_contents()
notable severity, 90% confident.
fs/path Checks path writability via PHP is_writable()
baseline severity, 75% confident.
fs/read File read via file_get_contents

Metadata

baseline severity, 80% confident.
package MIT License named in text
component severity, 90% confident.
file File has 30 or more lines

Identity

SHA-256 10d9fc57c111c71feb0ad459a587e024c6add3dcb0de376eb10231df65450255
Filename [email protected]
Package wp-cli/wp-config-transformer
Version v1.2.8
PURL pkg:composer/wp-cli/[email protected]

Origin

Source x
Feed wordpress.org
Ecosystem composer
Domain github.com
URL https://codeload.github.com/wp-cli/wp-config-transformer/legacy.zip/0bb2b9162c38ca72370380aea11dc06e431e13a5

Timeline

First seen 17 Aug 2026 04:21 UTC
First analyzed 17 Aug 2026 04:20 UTC
Last analyzed 18 Aug 2026 06:28 UTC
Last updated 18 Aug 2026 06:27 UTC

Labeling

Label unknown