Open-source atomic malware analysis

Analyze another

@depup/ora-classic

NPM
Verdict: SUSPICIOUS
SHA256: 43448fdc12489baaa414910fb61a60cb63326adcfd3a7660ed9cfa310a6d7f27 · 54%
“Elegant terminal spinner (with updated dependencies)”
AI Typosquatting package with unusual metadata
Mal-ecule
H₂(CmDb)Md(Pa)
Size 8.4 KB download
First seen 13 days ago
Analyzed 13 days ago
Package pkg:npm/%40depup/ora-classic
Ecosystem javascript
Source registry.npmjs.org

Loading file contents…

Loading traits…

Identity

SHA-256 43448fdc12489baaa414910fb61a60cb63326adcfd3a7660ed9cfa310a6d7f27
Canonical SHA-256 09bc2d51c49da543cd6ae28fbcb343c0508933c8bf02e11b84a4396765d7e34a
Filename @depup-ora-classic-5.4.2-depup.2.tgz
Package @depup/ora-classic
PURL pkg:npm/%40depup/ora-classic

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@depup/ora-classic/-/ora-classic-5.4.2-depup.2.tgz

Timeline

First seen 26 Jul 2026 22:05 UTC
First analyzed 27 Jul 2026 03:41 UTC
Last analyzed 27 Jul 2026 03:41 UTC
Last updated 27 Jul 2026 03:41 UTC

Labeling

Label unknown
Label source forager
Traits version 9266e