Open-source atomic malware analysis

Analyze another

supports-color 4.1.0

UNKNOWN
Verdict: BENIGN
“Detect whether a terminal supports color”
Mal-ecule
H₂(Os₃Po)Md(Pa₄)
Size 2.8 KB download
First seen 3 days ago
Analyzed 3 days ago
Ecosystem javascript
Also detected by osv+3 more

Referenced by 2 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
os/env Assigns full Node environment to alias
notable severity, 92% confident.
os/env/vars CI provider environment reference (TRAVIS)
notable severity, 80% confident.
os/sysinfo/platform Reads the Node.js process.platform value
notable severity, 80% confident.
process/io References Node.js stdout stream

Metadata

notable severity, 70% confident.
package/dependencies npm devDependency pinned to '*'
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/manifest/author Package declares Sindre Sorhus email
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 70% confident.
import Imports the Node.js os module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines

Identity

SHA-256 481db612e07dc9e4597164f8ea5715aa19c67d10d99919114600242bf598fba9
Canonical SHA-256 1b311ce41639e6fc53f2e6abc9a1ca3255bc1a09a21e2cd9dea06999e5de734c
Filename [email protected]
Package supports-color
Version 4.1.0
PURL pkg:npm/[email protected]

Timeline

First seen 23 Aug 2026 10:53 UTC
First analyzed 23 Aug 2026 10:53 UTC
Last analyzed 23 Aug 2026 12:10 UTC
Last updated 23 Aug 2026 12:10 UTC

Labeling

Label unknown
Traits version 63cf1