Open-source atomic malware analysis

Analyze another

nanoid 3.3.7

UNKNOWN
Verdict: BENIGN
SHA256: 28821115275efecbceccdfceb3c7c80c3c1d129af62a9c0f995f6002c72621f2
“A tiny (116 bytes), secure URL-friendly unique string ID generator”
Mal-ecule
H₂(OsPo)Md₂(Pa₆)
Size 5.4 KB download
First seen 24 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 72% confident.
os/random Node.js cryptographic random-value generation
notable severity, 80% confident.
process/io References Node.js stdout stream
baseline severity, 90% confident.
data Constructs a Uint8Array buffer
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
baseline severity, 80% confident.
process/info Reads Node.js arguments through process.argv

Metadata

notable severity, 95% confident.
file/profile README links to a translated README
notable severity, 90% confident.
package/manifest package.json omits name field
notable severity, 85% confident.
package/quality Tiny CommonJS stub exports object literal
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
component severity, 84% confident.
build Member under bin/native/prebuilds dir
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 28821115275efecbceccdfceb3c7c80c3c1d129af62a9c0f995f6002c72621f2
Canonical SHA-256 0e02b9178f3638eba65e96c8643f3bf08ea192dcef7faadaf3c38c50a829b301
Filename [email protected]
Package nanoid
Version 3.3.7
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz

Timeline

First seen 4 Aug 2026 10:48 UTC
First analyzed 4 Aug 2026 10:50 UTC
Last analyzed 26 Aug 2026 10:09 UTC
Last updated 26 Aug 2026 10:10 UTC

Labeling

Label unknown
Traits version 72034