Open-source atomic malware analysis

Analyze another

expect 27.2.5

UNKNOWN
Verdict: BENIGN
SHA256: 1ea1f1381e2a896cfa83156528c7ce6d07e360508ae8b2545dbefa356e84ecb3
“This package exports the `expect` function used in [Jest](https://jestjs.io/). You can find its documentation [on Jest's website](https://j…”
Mal-ecule
H₃(Cm₂Db₂Po)Md(Pa₄)
Size 28.2 KB download
First seen 5 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 90% confident.
data/source/property Reads constructor properties repeatedly
notable severity, 90% confident.
process/create/load CommonJS side-effect-only require
baseline severity, 95% confident.
data/source Many JavaScript infix subtraction expressions
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 90% confident.
data/serialize JSON-like object result field
component severity, 84% confident.
fs/file References the Node.js current working directory

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 95% confident.
package/testing Jest test framework
baseline severity, 90% confident.
build Babel define-property helper
baseline severity, 95% confident.
file/profile JavaScript AST has 30+ subtraction nodes
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 1ea1f1381e2a896cfa83156528c7ce6d07e360508ae8b2545dbefa356e84ecb3
Canonical SHA-256 05cb5cd2206257abecbd1b39506b0cced9165c4da7dc5db83b6fd4664cfec600
Filename [email protected]
Package expect
Version 27.2.5
PURL pkg:npm/[email protected]

Origin

Source x
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/expect/-/expect-27.2.5.tgz

Timeline

First seen 21 Aug 2026 18:18 UTC
First analyzed 21 Aug 2026 18:16 UTC
Last analyzed 24 Aug 2026 21:15 UTC
Last updated 24 Aug 2026 21:15 UTC

Labeling

Label unknown
Traits version 4092c