Open-source atomic malware analysis

Analyze another

@vue/compiler-sfc 3.5.12

UNKNOWN
Verdict: BENIGN
SHA256: 4c5a2f11c40cd3cbdc1fe3ea4f9be8d6bd386b5e606e5f1858649679f4b7d6b2
“@vue/compiler-sfc”
Mal-ecule
K(Li₂)O(S)H₈(Cm₃CrDb₁₄FHfOs₃Po₆U)Md₃(Pa₆Pt)
Size 545.3 KB download
First seen 17 days ago
Analyzed 5 days ago
Package pkg:npm/@vue/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Well-known

notable severity, 90% confident.
lib/core Lodash copyright domain reference
notable severity, 90% confident.
lib/web References the jquery.org domain

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
crypto/hash Node.js createHash('md4') call
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/source/property Reads constructor properties repeatedly
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 90% confident.
fs/file Calls readFileSync
notable severity, 90% confident.
hardware/input Registers capture-phase DOM event listener
notable severity, 94% confident.
os/api-resolution Constructs Node module via module.constructor
notable severity, 90% confident.
os/module CommonJS require inside a catch fallback
notable severity, 95% confident.
process/interpreter Node Module._compile runtime-code method

Metadata

notable severity, 94% confident.
file JavaScript has many Base64-like identifiers
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 96% confident.
lang/encoded Over 1000 Unicode escapes in JavaScript
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 96% confident.
package/testing/harness Calls a test-case function

20 of 43 traits shown

Identity

SHA-256 4c5a2f11c40cd3cbdc1fe3ea4f9be8d6bd386b5e606e5f1858649679f4b7d6b2
Canonical SHA-256 16168817f6de76d8f14a35d41d8103b6d5028d2a29f10c57d62363ca18e7c676
Filename [email protected]
Package @vue/compiler-sfc
Version 3.5.12
PURL pkg:npm/@vue/[email protected]

Origin

Source x
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.5.12.tgz

Timeline

First seen 12 Aug 2026 14:31 UTC
First analyzed 12 Aug 2026 14:01 UTC
Last analyzed 24 Aug 2026 21:57 UTC
Last updated 24 Aug 2026 21:58 UTC

Labeling

Label unknown
Traits version 73866