“Convert modern CSS into something browsers understand”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₂Db₃Po)Md₂(Pa₆)
Referenced by 10 samples
- benign zl-speceq-0.0.2-3.src.tar.gz fetched
- benign github.com-feast-dev-feast-v0.0.0-20260703030733-f296d4ba14c5.zip fetched
- hostile wco_models-3.1.0.314.gem fetched
- benign zl-splitter-0.3.0-4.src.tar.gz fetched
- benign zl-speceq-0.0.1-2.src.tar.gz fetched
- benign github.com-mediamarktsaturn-technolinator-v1.72.15-0.20260731064433-b88bf1457955.zip fetched
- hostile github.com-TryGhost-Ghost-v6.57.1+incompatible.zip fetched
- hostile SAIF-git903-Mobx-state-tree.tar.gz fetched
- benign wco_models-3.1.0.305.gem fetched
- benign github.com-gemini-testing-testplane-v8.42.0+incompatible.zip fetched
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
data/serialize
Serializes an identifier as JSON
notable severity, 90% confident.
data/string
Chains multiple JavaScript string replacements
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 85% confident.
package
Package declares a prepublish-only script
notable severity, 85% confident.
package/dependencies
Package has at least eight runtime deps
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 70% confident.
import
Imports the Node.js fs module
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
build
JavaScript file under a distribution directory
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 100% confident.
lang
References the JavaScript .length property
Identity
| SHA-256 | 4ddaaf619fe3982378248dd8ef3c1e8f08dd2b69fc14be19c131a45f8c3ea668 |
|---|---|
| Canonical SHA-256 | 1e9bcf454be980e868be43752554db9c96a1c73ddc50dfdf0482510679a6d67f |
| Filename | [email protected] |
| Package | postcss-preset-env |
| Version | 7.8.3 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | opensourcemalware.com |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/postcss-preset-env/-/postcss-preset-env-7.8.3.tgz |
Timeline
| First seen | 11 Aug 2026 12:33 UTC |
|---|---|
| First analyzed | 11 Aug 2026 12:34 UTC |
| Last analyzed | 15 Aug 2026 21:54 UTC |
| Last updated | 15 Aug 2026 21:53 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | e4c79 |
Not seeing what you expected? Let us know