Open-source atomic malware analysis

Analyze another

@aws-sdk/credential-provider-sso 3.933.0

UNKNOWN
Verdict: BENIGN
SHA256: 1229d250a2a1aa9b2da6deaa189be4e1f7c78462b4791d488d35669b5c2f3e41
“AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials”
Mal-ecule
H₃(CmOsPo)Md(Pa₅)
Size 8.7 KB download
First seen 8 days ago
Analyzed 4 days ago
Package pkg:npm/@aws-sdk/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Objectives

component severity, 92% confident.
collection/file-targeting Credential-like path segment

Micro-behaviors

notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 80% confident.
os/module Dynamically imports a literal module path
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 86% confident.
data/control-flow Calls a parenthesized function expression

Metadata

notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 1229d250a2a1aa9b2da6deaa189be4e1f7c78462b4791d488d35669b5c2f3e41
Filename [email protected]
Package @aws-sdk/credential-provider-sso
Version 3.933.0
PURL pkg:npm/@aws-sdk/[email protected]

Origin

Source x
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@aws-sdk/credential-provider-sso/-/credential-provider-sso-3.933.0.tgz

Timeline

First seen 17 Aug 2026 09:04 UTC
First analyzed 16 Aug 2026 20:31 UTC
Last analyzed 21 Aug 2026 18:40 UTC
Last updated 21 Aug 2026 18:40 UTC

Labeling

Label unknown
Traits version 8c01d