Open-source atomic malware analysis

Analyze another

@nocobase/plugin-field-formula

UNKNOWN
Verdict: BENIGN
SHA256: 4763d5cf00eb4d4f82ef9faecfb5162f151ba10dc5da2ef751aa3a6500efcb08
“Configure and store the results of calculations between multiple field values in the same record, supporting both Math.js and Excel formula…”
Mal-ecule
H₂(DbU)Md(Pa₂)
Size 34.0 KB download
First seen 46 days ago
Analyzed 46 days ago
Package pkg:npm/@nocobase/plugin-field-formula
Ecosystem javascript
Source registry.npmjs.org

1 flagged dependency

registry.npmjs.org/plugin-field-formula-2.1.23.tgznpm

Referenced by 2 samples

Objectives

component severity, 92% confident.
anti-static/obfuscation Eval initial word: alpha
component severity, 90% confident.
impact/destroy Destructive-action word: destroy
component severity, 88% confident.
supply-chain/hidden-payload/extensions Cookie import name field

Micro-behaviors

notable severity, 85% confident.
data/db Sequelize ORM

Metadata

notable severity, 70% confident.
package Major version is 1 or higher
notable severity, 75% confident.
package/manifest Package has meaningful description
baseline severity, 100% confident.
package/quality npm package has name field
component severity, 98% confident.
lang/encoded ESM wrapper helper

20 of 22 traits shown

Identity

SHA-256 4763d5cf00eb4d4f82ef9faecfb5162f151ba10dc5da2ef751aa3a6500efcb08
Canonical SHA-256 0001ea96635bf1bb18420ac94787168d8fbeec5980d53facd645950297eee59e
Filename @nocobase-plugin-field-formula-2.1.23.tgz
Package @nocobase/plugin-field-formula
PURL pkg:npm/@nocobase/plugin-field-formula

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@nocobase/plugin-field-formula/-/plugin-field-formula-2.1.23.tgz

Timeline

First seen 11 Jul 2026 13:15 UTC
First analyzed 11 Jul 2026 13:19 UTC
Last analyzed 11 Jul 2026 13:39 UTC
Last updated 11 Jul 2026 13:39 UTC

Labeling

Label unknown
Label source forager
Traits version ca852