Open-source atomic malware analysis

Analyze another

@teambit/webpack 1.0.1090

UNKNOWN
Verdict: BENIGN
Mal-ecule
H₄(Cm₃Db₂FOs)Md₃(LiPa₂)
Size 44.2 KB download
First seen 26 days ago
Analyzed 25 days ago
Ecosystem javascript

Referenced by 4 samples

Objectives

component severity, 90% confident.
credential-access/files Worker source script filename literal

Micro-behaviors

notable severity, 90% confident.
communications/http/request Peer or relay collection field
notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 94% confident.
data/encode JavaScript comment contains Base64-like content
notable severity, 88% confident.
data/source/dynamic Node require call with computed module name
notable severity, 75% confident.
fs/file File content I/O using read, write, or seek APIs
notable severity, 93% confident.
os/module CommonJS side-effect-only package require
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 98% confident.
library Testing Library ReactDOM test-utils dependency
notable severity, 80% confident.
package Package has optional dependencies
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
build Babel define-property helper
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 90% confident.
file/format Source map sourcesContent array
component severity, 95% confident.
file/profile Static HTML document shell
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
suspicious-package Suspicious package name: 'webpack-assets-manifest'

20 of 21 traits shown

Identity

SHA-256 4d0d489e2847d7b75d78318aa19934e6c06a8a4edf3739181eb044924db19fb6
Filename webpack-1.0.1090.tgz
Package @teambit/webpack
Version 1.0.1090
PURL pkg:npm/@teambit/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@teambit/webpack/-/webpack-1.0.1090.tgz

Timeline

First seen 1 Aug 2026 15:10 UTC
First analyzed 1 Aug 2026 15:12 UTC
Last analyzed 2 Aug 2026 20:51 UTC
Last updated 2 Aug 2026 20:49 UTC

Labeling

Label unknown
Label source upload
Traits version d9759