“JavaScript client for abtesting”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₈Db₅F)Md(Pa₅)
Referenced by 5 samples
- benign v0.3.1001.zip fetched
- benign github.com-nigel2392-go-django-v1.7.5-0.20260804000613-c0a8a376f0bb.zip fetched
- github.com-joeblew999-irgo-v0.20.0.zip fetched
- hostile langflow-ai-langflow-v1.12.0.dev29-source.tar.gz fetched
- suspicious github.com-LoaderB0T-awdware3-v0.0.0-20260809114126-39a320a45e92.zip fetched
Micro-behaviors
notable severity, 90% confident.
communications/http
JavaScript PUT request with body
notable severity, 70% confident.
communications/http/client
Assigns an XHR readystatechange handler
notable severity, 95% confident.
communications/http/header
Requests a JSON HTTP response
notable severity, 94% confident.
communications/http/request
Configures an HTTP POST request
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
notable severity, 92% confident.
data/control-flow
JavaScript empty optional-binding catch
notable severity, 70% confident.
data/encode
URL-encodes data via encodeURIComponent
notable severity, 85% confident.
data/serialize
Serializes an identifier as JSON
notable severity, 85% confident.
fs/file
Package script deletes files
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
package
README recommends scoped package installation
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
notable severity, 95% confident.
package/manifest
Package declares an unpkg CDN entry
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 85% confident.
file
High function density
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
component severity, 100% confident.
file/extension
File uses a source declaration extension
20 of 23 traits shown
Identity
| SHA-256 | 15532339608f42c32489babb03e1348a7a4a967584fce34d1f54c0dc6af9dd59 |
|---|---|
| Canonical SHA-256 | 051bfed4216b13a338879086dcc03c469d1ca0f3c41eb471ce03826690ee62a1 |
| Filename | [email protected] |
| Package | @algolia/abtesting |
| Version | 1.12.2 |
| PURL | pkg:npm/@algolia/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@algolia/abtesting/-/abtesting-1.12.2.tgz |
Timeline
| First seen | 4 Aug 2026 12:21 UTC |
|---|---|
| First analyzed | 4 Aug 2026 12:22 UTC |
| Last analyzed | 23 Aug 2026 00:46 UTC |
| Last updated | 23 Aug 2026 00:46 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 18b13 |
Not seeing what you expected? Let us know