Open-source atomic malware analysis

Analyze another

@cloudflare/workers-types 5.20260804.1

UNKNOWN
Verdict: BENIGN
SHA256: 2f33f018499defc760d15164315faf18292aa609b1c0437c3d9af9ce8427c266
Mal-ecule
K(Am)H₄(Cm₈CrDb₂Po)Md₂(Pa)
Size 388.3 KB download
First seen 26 days ago
Analyzed 7 days ago
Package pkg:npm/@cloudflare/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 8 samples

Well-known

notable severity, 98% confident.
app/development Cloudflare worker test helper marker

Micro-behaviors

notable severity, 88% confident.
communications/http LLM reasoning_effort request parameter
notable severity, 90% confident.
communications/http/header References HTTP Content-Type application/json
notable severity, 90% confident.
communications/http/request Calls the browser sendBeacon method
notable severity, 88% confident.
communications/http/services DeepSeek reasoning_content response field
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 92% confident.
crypto/hash Node.js constant-time comparison call
notable severity, 86% confident.
data/decode JavaScript invokes a Base64 decoder
notable severity, 82% confident.
data/format/media Declares an image MIME type
notable severity, 90% confident.
process/create/shell exec called with command-named variable
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
baseline severity, 72% confident.
fs/directory Checks whether Node.js entries are directories

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
vendor Microsoft Corporation source copyright header
baseline severity, 80% confident.
file/profile English function-word token "for"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name

20 of 26 traits shown

Identity

SHA-256 2f33f018499defc760d15164315faf18292aa609b1c0437c3d9af9ce8427c266
Canonical SHA-256 143b0b589f4bc5a3644a8c14621b34a07c36ab2daefe7093c787042204242ec6
Filename workers-types-5.20260804.1.tgz
Package @cloudflare/workers-types
Version 5.20260804.1
PURL pkg:npm/@cloudflare/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@cloudflare/workers-types/-/workers-types-5.20260804.1.tgz

Timeline

First seen 4 Aug 2026 17:10 UTC
First analyzed 4 Aug 2026 17:13 UTC
Last analyzed 23 Aug 2026 22:48 UTC
Last updated 23 Aug 2026 22:51 UTC

Labeling

Label unknown
Label source upload
Traits version b5ca8