“core-js compat”
AI
Legitimate npm package with standard dependencies
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H(Db)Md(Pa₅)
Referenced by 2 samples
Well-known
notable severity, 99% confident.
lib/runtime
Official core-js repository URL
Micro-behaviors
notable severity, 90% confident.
data/format
Markdown references a remote image
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
notable severity, 75% confident.
package/manifest/author
npm package author email uses .ru TLD
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 14d6216b539905e5abab15027273350f214f4119f15b63879d0b0b8fceecb7e2 |
|---|---|
| Canonical SHA-256 | 0087c79c621fb09a77d9319f160083603351a5d2fb878bf1f12fec0647cd5441 |
| Filename | core-js-compat-3.33.3.tgz |
| Package | core-js-compat |
| Version | 3.33.3 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/core-js-compat/-/core-js-compat-3.33.3.tgz |
Timeline
| First seen | 11 Aug 2026 18:16 UTC |
|---|---|
| First analyzed | 11 Aug 2026 18:20 UTC |
| Last analyzed | 15 Aug 2026 09:22 UTC |
| Last updated | 15 Aug 2026 09:21 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 73866 |
Not seeing what you expected? Let us know