“Use lab() and lch() color functions in CSS”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₅)
Referenced by 10 samples
- hostile github.com-ray-project-ray-v0.0.0-20260203155343-175198807ffe.zip fetched
- suspicious zl-speceq-0.0.2-2.src.tar.gz fetched
- hostile github.com-ray-project-ray-v0.0.0-20260803225306-e79c7acf1c31.zip fetched
- benign zl-speceq-0.0.2-3.src.tar.gz fetched
- benign github.com-UltimateHackingKeyboard-agent-v2.1.2+incompatible.zip fetched
- benign github.com-feast-dev-feast-v0.0.0-20260703030733-f296d4ba14c5.zip fetched
- hostile wco_models-3.1.0.314.gem fetched
- benign gitlab.com-aao-fyi-shock-v0.0.0-20230615195138-2b19899a95bf.zip fetched
- benign zl-splitter-0.3.0-4.src.tar.gz fetched
- benign zl-speceq-0.0.1-2.src.tar.gz fetched
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
package
Package has linting configured
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 70% confident.
file
Very low whitespace ratio (minified/compressed)
baseline severity, 95% confident.
file/profile
JavaScript AST has 30+ subtraction nodes
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
build
JavaScript file under a distribution directory
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 466d201ed9d97750d9924bea1a8be37d3da6e2f40fbc66ec37c297b34051be77 |
|---|---|
| Canonical SHA-256 | 0544bcf0d9c5cba151ba4b027348ddf8d10641b2618c1b2ad1c2df496dd873ed |
| Filename | [email protected] |
| Package | postcss-lab-function |
| Version | 4.2.1 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | opensourcemalware.com |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/postcss-lab-function/-/postcss-lab-function-4.2.1.tgz |
Timeline
| First seen | 11 Aug 2026 12:33 UTC |
|---|---|
| First analyzed | 11 Aug 2026 12:34 UTC |
| Last analyzed | 24 Aug 2026 12:19 UTC |
| Last updated | 24 Aug 2026 12:23 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | e4c79 |
Not seeing what you expected? Let us know