Open-source atomic malware analysis

Analyze another

github.com/sigstore/protobuf-specs v0.4.0

UNKNOWN
Verdict: BENIGN
SHA256: 31cc4bcdfa851760dcdc2710436440c4f7af0708b6a9dcf8d3b001e6262318bb
Mal-ecule
K₂(LiTe)H₆(Cm₃Db₆F₅Os₃Po₅Ti)Md₃(Bk₃Pa₉)
Size 439.8 KB download
First seen 14 days ago
Analyzed 1 day ago
Package pkg:golang/github.com/sigstore/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 2 samples

Well-known

notable severity, 98% confident.
lib/format Go source generated with the protobuf runtime
notable severity, 98% confident.
tool/development Gradle wrapper basename with launcher class

Micro-behaviors

notable severity, 92% confident.
communications/http/lib JVM opens a URL connection
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/serialize Imports Python protobuf runtime
notable severity, 94% confident.
data/source/dynamic JVM URLClassLoader class reference
notable severity, 90% confident.
data/string Rust replaces matched string content
notable severity, 92% confident.
fs/chmod/executable chmod makes an absolute path executable
notable severity, 94% confident.
fs/delete Java bytecode file deletion
notable severity, 90% confident.
fs/path Batch GOTO branch on existing path
notable severity, 90% confident.
os/module Ruby loads a relative source module
notable severity, 90% confident.
os/package-manager Shell or workflow npm publish command
notable severity, 90% confident.
process/control Java bytecode process wait
notable severity, 95% confident.
process/create Java bytecode ProcessBuilder start

Metadata

notable severity, 97% confident.
build Go generated-code header comment
notable severity, 99% confident.
package Go module source archive layout
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 100% confident.
package/manifest pyproject.toml boilerplate
notable severity, 95% confident.
package/testing/harness Rust test marker or harness

20 of 39 traits shown

Identity

SHA-256 31cc4bcdfa851760dcdc2710436440c4f7af0708b6a9dcf8d3b001e6262318bb
Filename [email protected]
Package github.com/sigstore/protobuf-specs
Version v0.4.0
PURL pkg:golang/github.com/sigstore/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.4.0.zip

Timeline

First seen 12 Aug 2026 11:10 UTC
First analyzed 12 Aug 2026 06:29 UTC
Last analyzed 25 Aug 2026 21:52 UTC
Last updated 25 Aug 2026 21:52 UTC

Labeling

Label unknown