Local reference
Suspicious dependency
Inferred
Mal-ecule
K₂(LiTe)H₄(Cm₁₂CrDbF)Md(Bk₂)
Referenced by 10 samples
- suspicious v0.0.0-20230217210516-3768d94f93cd.zip fetched
- benign v0.0.0-20230211031924-eeec579d60a2.zip fetched
- benign v0.0.0-20230108103035-91a5e0c1cd8e.zip fetched
- benign v0.0.0-20230118151748-3ad17a76d2c7.zip fetched
- benign v0.0.0-20230223203003-ac7410926c9d.zip fetched
- benign v0.0.0-20230103180730-bb452b6fe70f.zip fetched
- benign v0.0.0-20230108082501-1829ce3e39d8.zip fetched
- benign v0.0.0-20230211011527-3b20138ef57d.zip fetched
- benign v0.0.0-20230108103035-94e9284d0601.zip fetched
- benign v0.0.0-20230108052654-392c7a9b9675.zip fetched
Well-known
notable severity, 98% confident.
lib/format
Go protobuf runtime import
notable severity, 99% confident.
tool/development
Go module cache source archive go.mod member
Micro-behaviors
notable severity, 95% confident.
communications
Imports google.golang.org/grpc package
notable severity, 90% confident.
communications/http
curl sends request body with -d
notable severity, 92% confident.
communications/http/download
Curl fetches GitHub release metadata
notable severity, 90% confident.
communications/http/header
References HTTP Content-Type application/json
notable severity, 95% confident.
communications/http/lib
Constructs a Go HTTP client
notable severity, 85% confident.
communications/http/request
curl HTTP client call
notable severity, 95% confident.
crypto/hash
Go FNV-1a hash constructor
notable severity, 85% confident.
data/serialize
Go JSON unmarshal call
notable severity, 80% confident.
fs/directory
Shell invokes mkdir command
component severity, 70% confident.
fs
Contains the grep command keyword
Metadata
notable severity, 97% confident.
build
Go generated-code header comment
baseline severity, 85% confident.
file
Source has multiple lines over 1000 characters
baseline severity, 100% confident.
file/extension
POSIX shell script extension
baseline severity, 80% confident.
file/profile
English function-word token "that"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 85% confident.
lang
Generated code do-not-edit warning
Identity
| SHA-256 | 1a6766f1ca9aedfab018c2f379dc62047c72a0add4214a5403e2c32fe2f9524f |
|---|---|
| Canonical SHA-256 | 11852c30dc4d6d2b2a7c14727a1770487c38be0256cdf1b98f0b9b1d36f8a8de |
| Filename | [email protected] |
| Package | github.com/brotherlogic/githubcard |
| Version | v0.0.0-20230101072631-dcc4a0e0d7ed |
| PURL | pkg:golang/github.com/brotherlogic/[email protected] |
Origin
| Source | x |
|---|---|
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/brotherlogic/githubcard/@v/v0.0.0-20230101072631-dcc4a0e0d7ed.zip |
Timeline
| First seen | 23 Aug 2026 20:34 UTC |
|---|---|
| First analyzed | 23 Aug 2026 20:24 UTC |
| Last analyzed | 23 Aug 2026 22:16 UTC |
| Last updated | 23 Aug 2026 22:17 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b8c1c |
Not seeing what you expected? Let us know