Local reference
Suspicious dependency
Inferred
Mal-ecule
O₂(SAs)H(Db)
Objectives
hostile severity, 96% confident.
supply-chain/hidden-payload
Megabyte single-line self-decoding eval dropper
notable severity, 90% confident.
anti-static/obfuscation/code-metrics
JS/TS line exceeds 1 MB
component severity, 95% confident.
anti-static/obfuscation/string
Regex component marker
Micro-behaviors
notable severity, 75% confident.
data/encode
charCodeAt shift (JS shift cipher)
component severity, 84% confident.
fs/file
Regex component marker
component severity, 100% confident.
os/console
JavaScript console object
Metadata
baseline severity, 92% confident.
library
Large minified JavaScript bundle
component severity, 97% confident.
file/text
Validation vocabulary string
component severity, 80% confident.
package
Short sidecar-sized source
Identity
| SHA-256 | 3a9db5ba0c8cd4c91e91717df6b1a141fc1e0fbc0558b5a78d7f5c23f5b2a150 |
|---|---|
| Filename | 3a9db5ba0c8cd4c91e91717df6b1a141fc1e0fbc0558b5a78d7f5c23f5b2a150 |
| Package | 3a9db5ba0c8cd4c91e91717df6b1a141fc1e0fbc0558b5a78d7f5c23f5b2a150 |
Origin
| Source | harvest |
|---|---|
| Feed | malshare |
| Domain | malshare.com |
Timeline
| First seen | 5 Jun 2026 20:55 UTC |
|---|---|
| First analyzed | 7 Jun 2026 07:27 UTC |
| Last analyzed | 7 Jun 2026 07:27 UTC |
| Last updated | 7 Jun 2026 07:27 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 318d5 |
Not seeing what you expected? Let us know