Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(CmDb₂F)Md(Pa₄)
Referenced by 1 sample
Objectives
component severity, 82% confident.
anti-static/obfuscation/control-flow
Six / more no-arg constant-return helpers
Micro-behaviors
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
notable severity, 90% confident.
data/control-flow
JavaScript iterates enumerable object keys
notable severity, 85% confident.
fs/file
Package script deletes files
component severity, 80% confident.
process/interpreter
createContext symbol (vm or React/Vue/...)
Metadata
notable severity, 90% confident.
package
README recommends scoped package installation
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
JavaScript distribution output path
baseline severity, 90% confident.
package/dependencies
npm manifest omits devDependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 98% confident.
lang/encoded
ESM wrapper helper
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 4780d44767a4e559325e45582532313d56b57e921d348b3f4b0c62399afa9749 |
|---|---|
| Filename | pkg:npm/%40radix-ui/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
Timeline
| First seen | 15 Aug 2026 04:16 UTC |
|---|---|
| First analyzed | 15 Aug 2026 04:18 UTC |
| Last analyzed | 15 Aug 2026 04:26 UTC |
| Last updated | 15 Aug 2026 04:24 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know