Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₂F₂Po)Md(Pa₃)
Referenced by 2 samples
Micro-behaviors
notable severity, 88% confident.
communications/http
Calls server response send/end method
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
notable severity, 90% confident.
fs/file
Calls readFileSync
notable severity, 80% confident.
fs/write/file
Appends to file asynchronously
notable severity, 92% confident.
process/create/load
CommonJS loads a native .node module
Metadata
notable severity, 80% confident.
package
Package has optional dependencies
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
Sequential source identifier names
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file/format
Source map sourcesContent array
Identity
| SHA-256 | 3d0b7e73f0e79f944a95d1711c66112ca996399e5ac168e35764fef4abce0d7b |
|---|---|
| Canonical SHA-256 | 032dd7c8410cec28aa1b2c52b2a10c7a5845a4c89e0f468efa4e75967cabad3f |
| Filename | pkg-1.0.1096.tgz |
| Package | @teambit/pkg |
| Version | 1.0.1096 |
| PURL | pkg:npm/%40teambit/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@teambit/pkg/-/pkg-1.0.1096.tgz |
Timeline
| First seen | 5 Aug 2026 16:29 UTC |
|---|---|
| First analyzed | 5 Aug 2026 16:31 UTC |
| Last analyzed | 8 Aug 2026 15:46 UTC |
| Last updated | 8 Aug 2026 15:44 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 46d16 |
Not seeing what you expected? Let us know