Open-source atomic malware analysis

Analyze another

@pnpm-deps.inspection.outdated-1100.1.2.tgz

TAR.GZ
Verdict: BENIGN
Mal-ecule
O(S)H(Po)Md(Pa₇)
Size 6.0 KB download
First seen 24 days ago
Analyzed 24 days ago
Ecosystem javascript
Source npmjs.org

Objectives

suspicious severity, 82% confident.
supply-chain/metadata-anomaly npm package version major 40+

Micro-behaviors

notable severity, 82% confident.
process/create/shell pnpm package install command

Metadata

notable severity, 85% confident.
package Package has multiple entry points
notable severity, 90% confident.
package/fields Package has TypeScript types entry
baseline severity, 95% confident.
import imports ramda from npm:@pnpm/[email protected]
baseline severity, 95% confident.
import/npm::jest imports @jest/globals from 30.3.0
baseline severity, 95% confident.
import/npm::pnpm imports @pnpm/error from 1100.0.0
baseline severity, 95% confident.
import/npm::pnpm/catalogs imports @pnpm/catalogs.types from 1100.0.0
baseline severity, 95% confident.
import/npm::pnpm/config imports @pnpm/config.parse-overrides from 1100.0.1
baseline severity, 95% confident.
import/npm::pnpm/deps imports @pnpm/deps.path from 1100.0.4
baseline severity, 95% confident.
import/npm::pnpm/deps/inspection imports @pnpm/deps.inspection.outdated from 1100.1.2
baseline severity, 95% confident.
import/npm::pnpm/hooks imports @pnpm/hooks.read-package-hook from 1100.0.4
baseline severity, 95% confident.
import/npm::pnpm/installing imports @pnpm/installing.client from 1100.2.2
baseline severity, 95% confident.
import/npm::pnpm/lockfile imports @pnpm/lockfile.utils from 1100.0.9
baseline severity, 95% confident.
import/npm::pnpm/pkg-manifest imports @pnpm/pkg-manifest.utils from 1100.2.0
baseline severity, 95% confident.
import/npm::pnpm/resolving imports @pnpm/resolving.npm-resolver from 1101.3.2
baseline severity, 95% confident.
import/npm::types imports @types/ramda from 0.31.1
baseline severity, 99% confident.
lang TypeScript declaration file (.d.ts/.d.cts/.d.mts)
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 90% confident.
package/testing/presence Package uses Jest testing framework

20 of 36 traits shown

Identity

SHA-256 2af4ebd810bfb722698773ad6f5f270990efdee45cc5ffb24b52a186416c8e5d
Canonical SHA-256 242adc2016f3bfa18d29b4acd7829bd6c87b56d399534e473eef2194eba2e112
Filename @pnpm-deps.inspection.outdated-1100.1.2.tgz
Package @pnpm
Version 1100.1.2

Origin

Source harvest
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org

Timeline

First seen 24 May 2026 05:07 UTC
First analyzed 24 May 2026 10:19 UTC
Last analyzed 24 May 2026 10:19 UTC
Last updated 24 May 2026 10:19 UTC

Labeling

Label unknown
Label source harvest
Traits version 9ea7c