Open-source atomic malware analysis

Analyze another

actions/upload-artifact v4

UNKNOWN
Verdict: BENIGN
SHA256: 19695c9bbeb4ddc15f74808e2dd3de45d4e47a273f09ec00b68a47931ee5b8af
Mal-ecule
K₂(Li₆Te₂)H₇(Cm₂₅Cr₃Db₁₉F₅HfOs₅Po₈)Md₅(Bk₂Pa₅Pt)
Size 2.1 MB download
First seen 125 days ago
Analyzed 1 hour ago
Package pkg:github/actions/upload-artifact@v4
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Well-known

notable severity, 99% confident.
lib/format sax SAXParser constructor export
notable severity, 99% confident.
lib/network OpenTelemetry Authors copyright header
notable severity, 99% confident.
lib/web whatwg-url basicURLParse API marker
notable severity, 99% confident.
tool/development VS Code devcontainer configuration file

Micro-behaviors

notable severity, 95% confident.
communications/http References the WebDAV MKCOL method
notable severity, 94% confident.
communications/http/request Source parses a bytes HTTP range expression
notable severity, 96% confident.
communications/http/server Server defines several mutating HTTP routes
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 94% confident.
data/decode Masks character code to one byte
notable severity, 95% confident.
data/source/syntax Assigns a user identity property
notable severity, 95% confident.
data/string Searches an inline alphabet table
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars
notable severity, 96% confident.
os/package-manager References npm audit command
notable severity, 95% confident.
process/hook/console Preserves original JavaScript console methods

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 95% confident.
package/files JavaScript/TypeScript file under dist
notable severity, 95% confident.
package/testing Jest test framework

20 of 62 traits shown

Identity

SHA-256 19695c9bbeb4ddc15f74808e2dd3de45d4e47a273f09ec00b68a47931ee5b8af
Canonical SHA-256 0165b8a75330f3228f2c7a234b4ff8a107b9139c2b519147f4c8e9fe99b262d8
Filename actions-upload-artifact-v4.tar.gz
Package actions-upload-artifact
Version v4
PURL pkg:github/actions/upload-artifact@v4

Origin

Source harvest
Feed github.com
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/upload-artifact/tar.gz/v4

Timeline

First seen 24 Apr 2026 16:16 UTC
First analyzed 10 May 2026 04:04 UTC
Last analyzed 27 Aug 2026 23:31 UTC
Last updated 27 Aug 2026 23:31 UTC

Labeling

Label good
Label source harvest
Traits version b59b7