Open-source atomic malware analysis

Analyze another

pkg:npm/%40expo-google-fonts/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 179ed8c9ead43c36753d50a46f3a5941970964348b08d7794520fe145f6278e8
Mal-ecule
Md(Pa₂)
Size 3.3 MB download
First seen 8 days ago
Analyzed 8 days ago
Ecosystem go

Referenced by 1 sample

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 70% confident.
file JavaScript file under 5KB
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 179ed8c9ead43c36753d50a46f3a5941970964348b08d7794520fe145f6278e8
Filename pkg:npm/%40expo-google-fonts/[email protected]

Origin

Source x
Feed googleusercontent.com
Ecosystem go

Timeline

First seen 18 Aug 2026 17:55 UTC
First analyzed 18 Aug 2026 17:52 UTC
Last analyzed 18 Aug 2026 18:11 UTC
Last updated 18 Aug 2026 18:11 UTC

Labeling

Label unknown