Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H₂(DbPo)Md(Pa₆)
Referenced by 10 samples
- hostile github.com-exponentjs-exponent-v0.0.0-20260609183622-9e672a8f5a52.zip fetched
- benign gautammanak2.fetch-coder-0.2.18.vsix fetched
- benign LlewellynPaintsil.stateory-0.1.0.vsix fetched
- benign github.com-uvalib-virgo4-client-v0.0.0-20260731172256-7aff16689bd4.zip fetched
- suspicious yohei1996.biz-agent-0.5.0.vsix fetched
- benign github.com-airbytehq-airbyte-platform-v0.50.14.zip fetched
- benign helandbmgfadmladdbdkinhienphidaf.crx fetched
- hostile TayeburRahman-emaJhon-D-Loggin-Sipping.tar.gz fetched
- hostile github.com-expo-expo-v0.0.0-20260603121001-83f11e3f9d8d.zip fetched
- hostile github.com-google-a2ui-v0.0.0-20260806155321-a84c297fb71f.zip fetched
Well-known
notable severity, 99% confident.
lib/cloud
Firebase product homepage marker
Micro-behaviors
notable severity, 86% confident.
data/control-flow
Invokes zero-argument function at module scope
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
English function-word token "for"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 90% confident.
package/testing/harness
Test, spec, or fixture file
baseline severity, 100% confident.
package/testing/presence
File identified as a test by path or name
component severity, 100% confident.
file/extension
File uses a source declaration extension
Identity
| SHA-256 | 2ff9da87ebd1c895ace5deba2e86a3d417d17b90a8e8c3270df5f9b7a9caad1f |
|---|---|
| Canonical SHA-256 | 0454fd057027ceb4892dd28e516560f354bb92b1f99a22dbfe574a55bf2366b6 |
| Filename | functions-compat-0.4.6.tgz |
| Package | @firebase/functions-compat |
| Version | 0.4.6 |
| PURL | pkg:npm/@firebase/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@firebase/functions-compat/-/functions-compat-0.4.6.tgz |
Timeline
| First seen | 1 Aug 2026 22:20 UTC |
|---|---|
| First analyzed | 1 Aug 2026 22:22 UTC |
| Last analyzed | 27 Aug 2026 02:53 UTC |
| Last updated | 27 Aug 2026 02:57 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | edf6a |
Not seeing what you expected? Let us know