Open-source atomic malware analysis

Analyze another

pkg:npm/%40cspell/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 322c2657fd0b942a54d117d078f0b5401f7174785dd988eb94655a9954e64cc8
Mal-ecule
H₂(Cm₂Po)Md(Pa₃)
Size 3.2 KB download
First seen 12 days ago
Analyzed 12 days ago
Ecosystem github

Referenced by 1 sample

Micro-behaviors

notable severity, 78% confident.
communications/http Google web hostname
notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter

Metadata

notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension

Identity

SHA-256 322c2657fd0b942a54d117d078f0b5401f7174785dd988eb94655a9954e64cc8
Filename pkg:npm/%40cspell/[email protected]

Origin

Source x
Feed github.com
Ecosystem github

Timeline

First seen 16 Aug 2026 23:32 UTC
First analyzed 16 Aug 2026 23:31 UTC
Last analyzed 17 Aug 2026 00:00 UTC
Last updated 16 Aug 2026 23:59 UTC

Labeling

Label unknown