Open-source atomic malware analysis

Analyze another

@vue/compiler-ssr 3.5.33

NPM
Verdict: BENIGN
SHA256: 44e30124776814ec3c6a8f81d485ba62fc2905db335747e85d04409b8ae1bf8a
“@vue/compiler-ssr”
Mal-ecule
Md₂(Pa₃)
Size 10.9 KB download
First seen 22 days ago
Analyzed 11 days ago
Package pkg:npm/@vue/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Objectives

component severity, 100% confident.
anti-static/obfuscation/string se comma space fragment
component severity, 90% confident.
supply-chain/impersonation/package Republished package claims upstream repository

Micro-behaviors

baseline severity, 80% confident.
data/control-flow JavaScript zero-based index loop
baseline severity, 82% confident.
data/string Searches strings with includes or indexOf
baseline severity, 90% confident.
ui/window/manage Reads the value of a DOM element
component severity, 95% confident.
communications/url Encoded URL benign documentation or test context

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 80% confident.
import Requires a scoped npm package
baseline severity, 100% confident.
lang Symbol constructor usage marker
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package Package version uses numeric SemVer format
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 75% confident.
package/keywords Package declares keywords
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension Text, document, or config extension

20 of 24 traits shown

Identity

SHA-256 44e30124776814ec3c6a8f81d485ba62fc2905db335747e85d04409b8ae1bf8a
Filename [email protected]
Package @vue/compiler-ssr
Version 3.5.33
PURL pkg:npm/@vue/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.33.tgz

Timeline

First seen 2 Aug 2026 02:34 UTC
First analyzed 2 Aug 2026 02:36 UTC
Last analyzed 13 Aug 2026 08:30 UTC
Last updated 13 Aug 2026 08:30 UTC

Labeling

Label unknown
Traits version 73866