Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(DbPo)Md(Pa₅)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
data/control-flow
JavaScript iterates enumerable object keys
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 90% confident.
package
Package uses changelog/versioning tooling
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile
English function-word token "this"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 2babfc665b63d7161ff55be3c308f4379ae5cf6e19f17aa3bf91ac63fcc915fd |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | winget.run |
| Ecosystem | windows |
Timeline
| First seen | 24 Aug 2026 04:19 UTC |
|---|---|
| First analyzed | 24 Aug 2026 04:16 UTC |
| Last analyzed | 24 Aug 2026 04:36 UTC |
| Last updated | 24 Aug 2026 04:38 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know