Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 345a6a2903a2c2e8403921bb2e2ec5b4d63f0552ef8db0638710a8441e93b88e
Mal-ecule
H₂(DbPo)Md(Pa₂)
Size 4.7 KB download
First seen 5 days ago
Analyzed 5 days ago
Ecosystem go

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
data/decode Calls JavaScript unescape
notable severity, 80% confident.
process/io References Node.js stdout stream
component severity, 90% confident.
communications/url Encoded URL public documentation

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile English function-word token "and"
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name

Identity

SHA-256 345a6a2903a2c2e8403921bb2e2ec5b4d63f0552ef8db0638710a8441e93b88e
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 23 Aug 2026 23:40 UTC
First analyzed 23 Aug 2026 23:39 UTC
Last analyzed 23 Aug 2026 23:47 UTC
Last updated 23 Aug 2026 23:47 UTC

Labeling

Label unknown