Open-source atomic malware analysis

Analyze another

rc-tree-select 5.27.0

UNKNOWN
Verdict: BENIGN
SHA256: 35231482698134bd891ca17083d76ec6e934eefd1768250392b570a0747c59b3
“tree-select ui component for react”
Mal-ecule
H₄(CmDb₂PoU)Md(Pa₄)
Size 37.3 KB download
First seen 18 days ago
Analyzed 5 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 95% confident.
supply-chain/install-hook/scripts prepare runs husky

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/format Markdown references a remote image
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 96% confident.
process/create AI agent permission bypass flag
notable severity, 90% confident.
ui/window Sets a checkbox or radio checked state
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 88% confident.
data/control-flow Calls a matcher in a conditional expression
component severity, 92% confident.
ui/window/manage CSS sets element height to zero

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Babel define-property helper
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
component severity, 100% confident.
file/extension JavaScript source filename extension

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

20 of 24 traits shown

Identity

SHA-256 35231482698134bd891ca17083d76ec6e934eefd1768250392b570a0747c59b3
Canonical SHA-256 0ac6d057b76a5ea7182ff30335354951e4beabd6b4db079a5e588666580a92c7
Filename [email protected]
Package rc-tree-select
Version 5.27.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed opensourcemalware.com
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/rc-tree-select/-/rc-tree-select-5.27.0.tgz

Timeline

First seen 11 Aug 2026 12:33 UTC
First analyzed 11 Aug 2026 12:34 UTC
Last analyzed 24 Aug 2026 17:43 UTC
Last updated 24 Aug 2026 17:45 UTC

Labeling

Label unknown
Traits version 8140b