AI
NPM install hook exfiltrates environment
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 14cdaef8e3abab6bc1a915c6361005ff8ba4d8d48666e64f8d2b789ab203cc60 |
|---|---|
| Canonical SHA-256 | 0007b0a9433a9ee0d4f2a40adfcd53485ea71bc0bbd6eeccb9a36f6a1e977175 |
| Filename | github.com-shioyadan-konata-v1.1.0.zip |
| Package | github.com/shioyadan/konata |
| Version | v1.1.0 |
| PURL | pkg:golang/github.com/shioyadan/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/shioyadan/konata/@v/v1.1.0.zip |
Timeline
| First seen | 16 Aug 2026 19:41 UTC |
|---|---|
| First analyzed | 18 Aug 2026 12:16 UTC |
| Last analyzed | 18 Aug 2026 12:16 UTC |
| Last updated | 18 Aug 2026 12:16 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | forager |
| Traits version | 18b13 |
Not seeing what you expected? Let us know