Open-source atomic malware analysis

Analyze another

@hocuspocus/provider 4.5.0

UNKNOWN
Verdict: BENIGN
SHA256: 45aefece31f24a4b909d01b007a00f68faa88d1f76e26e6b081f2c3115ac23eb
Mal-ecule
H₂(Cm₂Db)Md₂(Pa₅)
Size 62.7 KB download
First seen 22 days ago
Analyzed 22 days ago
Package pkg:npm/@hocuspocus/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Micro-behaviors

notable severity, 86% confident.
communications/socket JavaScript socket send call
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 100% confident.
file/format JavaScript source map
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 85% confident.
package/quality Package has multiple entry points
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 88% confident.
file/string Contains a session identifier field
component severity, 95% confident.
library esbuild __defProp helper
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 45aefece31f24a4b909d01b007a00f68faa88d1f76e26e6b081f2c3115ac23eb
Canonical SHA-256 1de1e23e93d41dd2886a12af898557c1243a11c0c6a48a7b115079a88fbfad4b
Filename provider-4.5.0.tgz
Package @hocuspocus/provider
Version 4.5.0
PURL pkg:npm/@hocuspocus/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@hocuspocus/provider/-/provider-4.5.0.tgz

Timeline

First seen 4 Aug 2026 19:45 UTC
First analyzed 4 Aug 2026 19:47 UTC
Last analyzed 4 Aug 2026 19:47 UTC
Last updated 4 Aug 2026 19:45 UTC

Labeling

Label unknown
Label source upload
Traits version 3fe0e