Local reference
Suspicious dependency
Inferred
Mal-ecule
H₅(CmDbF₃OsPo)
Micro-behaviors
notable severity, 90% confident.
communications/http/url
Cleartext http:// URL
notable severity, 90% confident.
os/random/prng
Go math/rand integer generation call
notable severity, 92% confident.
process/create/shell
Workflow step pipes a download to shell
baseline severity, 80% confident.
fs/file/write
Write file via ioutil.WriteFile
component severity, 88% confident.
data/runtime
Pipe to sh interpreter
component severity, 90% confident.
data/serialize
JSON-like object command field
Metadata
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 90% confident.
package/files
File has a .png extension
Identity
| SHA-256 | 264eeaee34889c98aa5896b7af906aa9df2fee0a46329c3f63133d22971fdb63 |
|---|---|
| Canonical SHA-256 | 006d25a7e0ddb742749509dbb59f0c8967a04f61e4068920b390f902abde0209 |
| Filename | [email protected] |
| Package | github.com/tidwall/buntdb |
| Version | v1.3.0 |
| PURL | pkg:golang/github.com/tidwall/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/tidwall/buntdb/@v/v1.3.0.zip |
Timeline
| First seen | 2 Aug 2026 10:06 UTC |
|---|---|
| First analyzed | 2 Aug 2026 10:07 UTC |
| Last analyzed | 21 Aug 2026 20:31 UTC |
| Last updated | 21 Aug 2026 20:32 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 58687 |
Not seeing what you expected? Let us know