Open-source atomic malware analysis

Analyze another

supports-color 6.0.0

UNKNOWN
Verdict: BENIGN
“Detect whether a terminal supports color”
Mal-ecule
K(Te)H₂(Os₂Po)Md(Pa₄)
Size 3.2 KB download
First seen 16 days ago
Analyzed 3 days ago
Ecosystem javascript
Also detected by osv+3 more

Referenced by 7 samples

Well-known

notable severity, 98% confident.
tool/development/github-actions GitHub CodeQL Action source archive member

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 92% confident.
os/env/vars CI provider environment reference (CIRCLECI)
notable severity, 80% confident.
os/sysinfo/platform Reads the Node.js process.platform value
notable severity, 80% confident.
process/io References Node.js stdout stream

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/manifest/author Package declares Sindre Sorhus email
notable severity, 85% confident.
package/quality Tiny CommonJS stub exports object literal
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 70% confident.
import Imports the Node.js os module
baseline severity, 100% confident.
package package.json defines a package version

Identity

SHA-256 16a78540607a332b7236e725c25c305cbae87f10419ec7fd706e1dffed0e1bfc
Canonical SHA-256 03b3defae5a0801f91bc78f5f3ff2b13dec13df4cef4c0a94554b2d1183da1d1
Filename [email protected]
Package supports-color
Version 6.0.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/supports-color/-/supports-color-6.0.0.tgz

Timeline

First seen 11 Aug 2026 22:45 UTC
First analyzed 11 Aug 2026 22:46 UTC
Last analyzed 24 Aug 2026 09:17 UTC
Last updated 24 Aug 2026 09:18 UTC

Labeling

Label unknown
Traits version 73866