Open-source atomic malware analysis

Analyze another

yuku-parser 0.9.3

UNKNOWN
Verdict: BENIGN
SHA256: 20ace3104335d69cf18f6a029bedb811c54aa60fd6e4237b437d46d45cb70666
Mal-ecule
H₄(Db₅FOsPo₂)Md₂(InPa₅)
Size 12.6 KB download
First seen 1 day ago
Analyzed 19 hours ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 92% confident.
data/control-flow JavaScript empty optional-binding catch
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 90% confident.
data/encode Builds characters with String.fromCharCode
notable severity, 80% confident.
data/source JavaScript bitwise arithmetic and shift chain
notable severity, 88% confident.
data/source/dynamic Loads a computed module with Node.js require
notable severity, 90% confident.
fs/file Calls readFileSync
notable severity, 90% confident.
os/module CommonJS require inside try fallback
notable severity, 92% confident.
process/create/load CommonJS loads a native .node module
notable severity, 100% confident.
process/create/shell Executes shell commands synchronously

Metadata

notable severity, 85% confident.
import Imports Node child_process through ESM
notable severity, 80% confident.
package/dependencies Package has optional dependencies
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
suspicious-package Suspicious package name: '@yuku-parser/binding-win32-arm64'

Identity

SHA-256 20ace3104335d69cf18f6a029bedb811c54aa60fd6e4237b437d46d45cb70666
Filename [email protected]?checksum=sha1:128243a587fa56934109a9195edb13f1dacc48aa%2Csha512:f7ac0fa079f06977e466fed420e5240dbfaced91fc96ff10b60f8cc5dbc7515d4b15ae6357d88a39a6a6b35f78d9842dfa4ac542b5a20fa9528367
Package yuku-parser
Version 0.9.3
PURL pkg:npm/[email protected]

Origin

Source x
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/yuku-parser/-/yuku-parser-0.9.3.tgz

Timeline

First seen 27 Aug 2026 15:06 UTC
First analyzed 27 Aug 2026 15:06 UTC
Last analyzed 28 Aug 2026 11:01 UTC
Last updated 28 Aug 2026 11:01 UTC

Labeling

Label unknown
Traits version b59b7