Open-source atomic malware analysis

Analyze another

bcp-47 2.1.0

UNKNOWN
Verdict: BENIGN
SHA256: 3b2c0bb662eac52be06826649ab7371a050212f0f0cd3883c59af9888c4db989
“Parse and stringify BCP 47 language tags”
Mal-ecule
H₂(CmPo)Md(Pa₄)
Size 7.7 KB download
First seen 22 days ago
Analyzed 9 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 95% confident.
package/files Filename is package.json
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 3b2c0bb662eac52be06826649ab7371a050212f0f0cd3883c59af9888c4db989
Filename [email protected]
Package bcp-47
Version 2.1.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed aur.archlinux.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/bcp-47/-/bcp-47-2.1.0.tgz

Timeline

First seen 3 Aug 2026 07:40 UTC
First analyzed 3 Aug 2026 07:41 UTC
Last analyzed 16 Aug 2026 05:18 UTC
Last updated 16 Aug 2026 05:16 UTC

Labeling

Label unknown
Traits version fb1c6