Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H(Po)Md(Pa₄)
Referenced by 1 sample
Well-known
notable severity, 95% confident.
lib/web
Astro upstream publisher identity
Micro-behaviors
notable severity, 80% confident.
process/io
References Node.js stdout stream
baseline severity, 80% confident.
fs/path
References a node_modules directory path
baseline severity, 80% confident.
process/info
Reads Node.js arguments through process.argv
component severity, 93% confident.
communications/http
Repeating timer marker
Metadata
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/testing/harness
Test, spec, or fixture file
baseline severity, 100% confident.
package/testing/presence
File identified as a test by path or name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
Identity
| SHA-256 | 193d36d8d2c3db708e04462fccce149cbd090388a4b2521940508450b06b17f8 |
|---|---|
| Filename | pkg:npm/%40astrojs/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | aur.archlinux.org |
| Ecosystem | arch |
Timeline
| First seen | 24 Aug 2026 00:01 UTC |
|---|---|
| First analyzed | 23 Aug 2026 23:55 UTC |
| Last analyzed | 24 Aug 2026 00:18 UTC |
| Last updated | 24 Aug 2026 00:22 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know