Open-source atomic malware analysis

Analyze another

@graphorin/secret-1password

NPM
Verdict: SUSPICIOUS
SHA256: 20c4c6627d67ab55c919237e68803067aa7b2354d539040113a7dc2ed38c6f79 · 54%
“Reference 1Password secret-resolver adapter for the Graphorin framework. Registers the `op://` scheme on top of `@graphorin/security`'s plu…”
AI Unlisted publisher, potential takeover
Mal-ecule
H₃(CmDbPo₃)Md₂(Pa₄)
Size 21.6 KB download
First seen 2 days ago
Analyzed 2 days ago
Package pkg:npm/%40graphorin/secret-1password
Ecosystem javascript
Source registry.npmjs.org

Loading file contents…

Loading traits…

Identity

SHA-256 20c4c6627d67ab55c919237e68803067aa7b2354d539040113a7dc2ed38c6f79
Canonical SHA-256 0eba9b94ec8ef5b9264b4ecc0e5ec6b0b269130fd34e82bc4de323eecbaaa3dc
Filename @graphorin-secret-1password-0.13.5.tgz
Package @graphorin/secret-1password
PURL pkg:npm/%40graphorin/secret-1password

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@graphorin/secret-1password/-/secret-1password-0.13.5.tgz

Timeline

First seen 20 Jul 2026 07:38 UTC
First analyzed 20 Jul 2026 08:56 UTC
Last analyzed 20 Jul 2026 08:56 UTC
Last updated 20 Jul 2026 08:56 UTC

Labeling

Label unknown
Label source forager
Traits version 16794