Open-source atomic malware analysis

Analyze another

@teambit/webpack 1.0.1137

UNKNOWN
Verdict: BENIGN
SHA256: 2f75e081c6ae69e392867cd1302041746679a2940d1c5840897fd9a5577ac428
Mal-ecule
H₃(Cm₂Db₃Os₂)Md₂(Pa₃)
Size 40.4 KB download
First seen 1 day ago
Analyzed 4 hours ago
Package pkg:npm/@teambit/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 7 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 92% confident.
data/control-flow JavaScript empty optional-binding catch
notable severity, 88% confident.
data/source/dynamic Loads a computed module with Node.js require
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 93% confident.
os/module CommonJS side-effect-only package require
notable severity, 95% confident.
os/sysinfo/performance Reads Node.js process memory usage
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 92% confident.
file/profile Generated documentation web page
notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 95% confident.
package/files JavaScript/TypeScript file under dist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
suspicious-package Suspicious package name: 'webpack-assets-manifest'

Identity

SHA-256 2f75e081c6ae69e392867cd1302041746679a2940d1c5840897fd9a5577ac428
Canonical SHA-256 0724acf167dd9fb258779e2024285ed94d93353e0dc0e4729c7d35b6965f77af
Filename @teambit-webpack-1.0.1137.tgz
Package @teambit/webpack
Version 1.0.1137
PURL pkg:npm/@teambit/[email protected]

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@teambit/webpack/-/webpack-1.0.1137.tgz

Timeline

First seen 26 Aug 2026 20:10 UTC
First analyzed 27 Aug 2026 14:44 UTC
Last analyzed 28 Aug 2026 07:23 UTC
Last updated 28 Aug 2026 07:23 UTC

Labeling

Label unknown
Label source forager
Traits version b59b7