Open-source atomic malware analysis

Analyze another

postcss-modules 4.1.3

UNKNOWN
Verdict: BENIGN
SHA256: 4eee250ffda979cb4238ea7236fa342c3c5ad1bf131a954a81c5cac5fed4216d
“PostCSS plugin to use CSS Modules everywhere”
Mal-ecule
H₃(CmDb₂F)Md(Pa₄)
Size 8.9 KB download
First seen 17 days ago
Analyzed 6 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/encode Builds characters with String.fromCharCode
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 80% confident.
fs/file Calls a file-reading API
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 86% confident.
data/control-flow Calls a parenthesized function expression

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
build Babel async-to-generator helper
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 70% confident.
import Imports the Node.js fs module
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 4eee250ffda979cb4238ea7236fa342c3c5ad1bf131a954a81c5cac5fed4216d
Canonical SHA-256 2a9e41f40fd20ed9221a86536aa459aab3cc2f4c95c605f6a7fa555083cb4523
Filename [email protected]
Package postcss-modules
Version 4.1.3
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/postcss-modules/-/postcss-modules-4.1.3.tgz

Timeline

First seen 11 Aug 2026 07:31 UTC
First analyzed 11 Aug 2026 07:33 UTC
Last analyzed 22 Aug 2026 06:09 UTC
Last updated 22 Aug 2026 06:09 UTC

Labeling

Label unknown
Traits version 73866