“Flow types for the Flow-ESTree spec produced by the hermes parser”
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Am)H(Po)Md₂(Pa₃)
Referenced by 10 samples
- suspicious arca_agent-1.9.4.tar.gz fetched
- hostile keycloak-26.6-iamguarded-compat-26.6.1-r3.apk fetched
- hostile github.com-Alfresco-prowler-v0.0.0-20260805124159-d7816f1179d9.zip fetched
- hostile github.com-drakon-systems-ltd-shieldcortex-v4.54.5-0.20260818133437-5a79745462ae+incompatible.zip fetched
- suspicious floorp-12.16.4-2.src.tar.gz fetched
- benign dbtLabsInc.dbt-0.99.5.vsix fetched
- benign github.com-cilcenk-coremetry-v0.9.406.zip fetched
- benign dbtLabsInc.dbt-0.97.1.vsix fetched
- benign dbtLabsInc.dbt-0.93.1.vsix fetched
- suspicious 0.16.3.tar.gz fetched
Well-known
notable severity, 99% confident.
app/development
Meta Platforms source copyright header
Micro-behaviors
notable severity, 95% confident.
process/create/shell
Shell command variable at a command boundary
Metadata
notable severity, 70% confident.
file
Very low comment-to-code ratio in script
notable severity, 95% confident.
package/files
JavaScript/TypeScript file under dist
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile
English function-word token "with"
baseline severity, 90% confident.
lang
Code generation source path
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
Identity
| SHA-256 | 49b0a9db41f743b59375e355aa9489a97c51ac9a655107de83140fc03be2f7cc |
|---|---|
| Canonical SHA-256 | 33a648062768e1dd0ef635f79fb9ba7f46cefa0ad1a1da5f168386de67c69f30 |
| Filename | [email protected] |
| Package | hermes-estree |
| Version | 0.25.1 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz |
Timeline
| First seen | 4 Aug 2026 20:55 UTC |
|---|---|
| First analyzed | 4 Aug 2026 20:55 UTC |
| Last analyzed | 28 Aug 2026 17:57 UTC |
| Last updated | 28 Aug 2026 17:58 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b59b7 |
Not seeing what you expected? Let us know