“Essential utility library for crypto development”
AI
Exfiltrates credentials to OOB endpoint
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₄(Eu₂S₃CaDy₃)H₆(Cm₄CrDb₂F₃Os₃Po)Md(In)
Loading file contents…
Loading traits…
Identity
| SHA-256 | 2593f2abe6378744155396c74b6093974e22ab897446f76fcb894dd48dbeddc4 |
|---|---|
| Canonical SHA-256 | 0f530240f93012fe1f36fdd4693e439f948b89d419718d3ef739a0d3c85994a5 |
| Filename | ledger-lib-1.0.3.tgz |
| Package | ledger-lib |
| Version | 1.0.3 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | osv.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/ledger-lib/-/ledger-lib-1.0.3.tgz |
Timeline
| First seen | 5 Aug 2026 09:05 UTC |
|---|---|
| First analyzed | 17 Aug 2026 01:35 UTC |
| Last analyzed | 17 Aug 2026 01:35 UTC |
| Last updated | 17 Aug 2026 01:35 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | forager |
| Traits version | 298c2 |
Not seeing what you expected? Let us know