Open-source atomic malware analysis

Analyze another

metro-babel-transformer 0.64.0

NPM
Verdict: BENIGN
SHA256: 4da962058637b3670cec989f0e6ea72bf025dec74665414d8dfbdfd3dfe8c974
“🚇 Base Babel transformer for Metro.”
Mal-ecule
H(F)Md(Pa)
Size 1.6 KB download
First seen 3 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Objectives

component severity, 95% confident.
collection/stealer Platform telemetry field
component severity, 90% confident.
supply-chain/impersonation/package Republished package claims upstream repository

Micro-behaviors

notable severity, 85% confident.
fs/file Package script deletes files
baseline severity, 80% confident.
os/env Node process.env access
baseline severity, 85% confident.
os/env/vars JavaScript process.env word assignment

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 80% confident.
import Requires a scoped npm package
baseline severity, 95% confident.
lang JavaScript or TypeScript source filename
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package Package version uses numeric SemVer format
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 75% confident.
package/keywords Package declares keywords
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension

Identity

SHA-256 4da962058637b3670cec989f0e6ea72bf025dec74665414d8dfbdfd3dfe8c974
Filename [email protected]
Package metro-babel-transformer
Version 0.64.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/metro-babel-transformer/-/metro-babel-transformer-0.64.0.tgz

Timeline

First seen 12 Aug 2026 00:37 UTC
First analyzed 12 Aug 2026 00:38 UTC
Last analyzed 13 Aug 2026 08:23 UTC
Last updated 13 Aug 2026 08:23 UTC

Labeling

Label unknown
Traits version 73866