Open-source atomic malware analysis

Analyze another

@next/react-dev-overlay 10.2.3

UNKNOWN
Verdict: BENIGN
SHA256: 38cfa6895be4ed80f7873ef6c62c77151570c1bfdc59ad1fc71c4cb53a28118e
“A development-only overlay for developing React applications.”
Mal-ecule
K(Li)O(S)H₇(Cm₇Db₅FHfOs₃Po₆U₄)Md₄(InPa₃Pt)
Size 91.5 KB download
First seen 10 days ago
Analyzed 10 days ago
Package pkg:npm/@next/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Well-known

notable severity, 96% confident.
lib/web Next.js npm archive repository

Micro-behaviors

notable severity, 88% confident.
communications/http Calls server response send/end method
notable severity, 90% confident.
communications/http/header References HTTP Content-Type application/json
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 94% confident.
data Creates Node.js Buffer from JSON serialization
notable severity, 90% confident.
data/db Writes browser storage with a computed key
notable severity, 90% confident.
data/encode Builds characters with String.fromCharCode
notable severity, 92% confident.
process/create Starts a child process through a platform API
notable severity, 90% confident.
process/create/shell References a shell executable
notable severity, 90% confident.
process/enumerate Constructs the VSCodium editor CLI identifier
notable severity, 90% confident.
ui/window Input removed from the keyboard tab order
notable severity, 97% confident.
ui/window/manage HTML area element has an href attribute

Metadata

notable severity, 99% confident.
file/profile Escaped Unicode script codepoint in source
notable severity, 96% confident.
lang/encoded Over 1000 Unicode escapes in JavaScript
notable severity, 90% confident.
package/manifest Repository URL uses owner/project coordinate
notable severity, 96% confident.
package/testing/harness Defines a test-case function

20 of 43 traits shown

Identity

SHA-256 38cfa6895be4ed80f7873ef6c62c77151570c1bfdc59ad1fc71c4cb53a28118e
Canonical SHA-256 010ebac95d5e3842d7bfda3c5dc0744041f4e64e294a0378d236583a975da6a5
Filename react-dev-overlay-10.2.3.tgz
Package @next/react-dev-overlay
Version 10.2.3
PURL pkg:npm/@next/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@next/react-dev-overlay/-/react-dev-overlay-10.2.3.tgz

Timeline

First seen 17 Aug 2026 00:02 UTC
First analyzed 17 Aug 2026 00:05 UTC
Last analyzed 17 Aug 2026 00:42 UTC
Last updated 17 Aug 2026 00:41 UTC

Labeling

Label unknown
Label source upload