Local reference
Suspicious dependency
Inferred
Mal-ecule
H₄(Cm₃Db₂FOs)Md₃(LiPa₂)
Referenced by 4 samples
Objectives
component severity, 90% confident.
credential-access/files
Worker source script filename literal
Micro-behaviors
notable severity, 90% confident.
communications/http/request
Peer or relay collection field
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
notable severity, 94% confident.
data/encode
JavaScript comment contains Base64-like content
notable severity, 88% confident.
data/source/dynamic
Node require call with computed module name
notable severity, 75% confident.
fs/file
File content I/O using read, write, or seek APIs
notable severity, 93% confident.
os/module
CommonJS side-effect-only package require
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 98% confident.
library
Testing Library ReactDOM test-utils dependency
notable severity, 80% confident.
package
Package has optional dependencies
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
build
Babel define-property helper
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 90% confident.
file/format
Source map sourcesContent array
component severity, 95% confident.
file/profile
Static HTML document shell
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
supply-chain
notable severity, 80% confident.
suspicious-package
Suspicious package name: 'webpack-assets-manifest'
20 of 21 traits shown
Identity
| SHA-256 | 4d0d489e2847d7b75d78318aa19934e6c06a8a4edf3739181eb044924db19fb6 |
|---|---|
| Filename | webpack-1.0.1090.tgz |
| Package | @teambit/webpack |
| Version | 1.0.1090 |
| PURL | pkg:npm/@teambit/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@teambit/webpack/-/webpack-1.0.1090.tgz |
Timeline
| First seen | 1 Aug 2026 15:10 UTC |
|---|---|
| First analyzed | 1 Aug 2026 15:12 UTC |
| Last analyzed | 2 Aug 2026 20:51 UTC |
| Last updated | 2 Aug 2026 20:49 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | d9759 |
Not seeing what you expected? Let us know