Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 1d1d58f5661909c6c49302149540279363ba7566df517f05daad1bdc2eaa15eb
Mal-ecule
H(Po₂)Md(Pa₂)
Size 6.1 KB download
First seen 10 days ago
Analyzed 10 days ago
Ecosystem wordpress

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
process/create/load CommonJS side-effect-only require
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 75% confident.
os/module Side-effect require without binding

Metadata

notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 90% confident.
package/testing/harness Test, spec, or fixture file
baseline severity, 100% confident.
package/testing/presence File identified as a test by path or name
component severity, 90% confident.
file File has 30 or more lines
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 95% confident.
package/files Filename is package.json

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepublish' hook that runs during install

Identity

SHA-256 1d1d58f5661909c6c49302149540279363ba7566df517f05daad1bdc2eaa15eb
Filename pkg:npm/[email protected]

Origin

Source x
Feed wordpress.org
Ecosystem wordpress

Timeline

First seen 17 Aug 2026 05:07 UTC
First analyzed 17 Aug 2026 05:09 UTC
Last analyzed 17 Aug 2026 05:30 UTC
Last updated 17 Aug 2026 05:28 UTC

Labeling

Label unknown