Open-source atomic malware analysis

Analyze another

@tanstack/react-router 1.170.25

NPM
Verdict: BENIGN
SHA256: 3b392b1fa6e40dd0232a5779a898cc4b59f5b475fb5a64106e78d6f0c64ff050
Mal-ecule
O(Eu)H₅(Cm₃Db₃OsPoU)Md₂(Pa₄)
Size 194.4 KB download
First seen 17 days ago
Analyzed 15 days ago
Package pkg:npm/@tanstack/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by osv+4 more

Referenced by 4 samples

Objectives

notable severity, 90% confident.
exfiltration/http HTTP client targets a router path
baseline severity, 90% confident.
credential-access/env Recognized process.env assignment

Micro-behaviors

notable severity, 90% confident.
communications/http/url References current page URL
notable severity, 90% confident.
communications/http/user-agent-routing Node handler gets User-Agent header
notable severity, 90% confident.
data/control-flow ESM module exports a provider symbol
notable severity, 90% confident.
data/db Calls localStorage or sessionStorage setItem
notable severity, 85% confident.
data/source/syntax Variable receives a function expression
notable severity, 90% confident.
os/module ESM side-effect-only package import
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
notable severity, 84% confident.
ui/window/manage Creates script DOM element
baseline severity, 85% confident.
data/format HTML, SVG, or script element string

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 95% confident.
build Code bundled with Rolldown
baseline severity, 100% confident.
lang Constructs a JavaScript Promise
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package HISTORY documentation reference

20 of 57 traits shown

Identity

SHA-256 3b392b1fa6e40dd0232a5779a898cc4b59f5b475fb5a64106e78d6f0c64ff050
Filename react-router-1.170.25.tgz
Package @tanstack/react-router
Version 1.170.25
PURL pkg:npm/@tanstack/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@tanstack/react-router/-/react-router-1.170.25.tgz

Timeline

First seen 9 Aug 2026 23:44 UTC
First analyzed 9 Aug 2026 23:46 UTC
Last analyzed 12 Aug 2026 02:11 UTC
Last updated 12 Aug 2026 02:11 UTC

Labeling

Label unknown
Label source upload
Traits version 73866