Open-source atomic malware analysis

Analyze another

@nocobase/plugin-field-sequence

UNKNOWN
Verdict: BENIGN
SHA256: 4f3961443d6f39a7e38ef7a1ca66e6535ee48587f68598531b67ac909a696966
“Automatically generate codes based on configured rules, supporting combinations of dates, numbers, and text.”
Mal-ecule
O₃(CDyP)H₄(Db₂OsPoU)Md₃(Pa₆)
Size 369.5 KB download
First seen 46 days ago
Analyzed 46 days ago
Package pkg:npm/@nocobase/plugin-field-sequence
Ecosystem javascript
Source registry.npmjs.org

1 flagged dependency

registry.npmjs.org/plugin-field-sequence-2.1.23.tgznpm

Referenced by 2 samples

Objectives

notable severity, 82% confident.
command-and-control/dropper/execution Bracketed Date.now call
notable severity, 90% confident.
discovery/system Discover JavaScript environment locale
notable severity, 70% confident.
persistence/system/cron Cron schedule format literal string

Micro-behaviors

notable severity, 85% confident.
data/db Sequelize ORM
notable severity, 85% confident.
process/interpreter npm script runs a script interpreter

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: xor → base64
baseline severity, 98% confident.
package/testing/presence DefinitelyTyped package path

20 of 35 traits shown

Identity

SHA-256 4f3961443d6f39a7e38ef7a1ca66e6535ee48587f68598531b67ac909a696966
Canonical SHA-256 0001ea96635bf1bb18420ac94787168d8fbeec5980d53facd645950297eee59e
Filename @nocobase-plugin-field-sequence-2.1.23.tgz
Package @nocobase/plugin-field-sequence
PURL pkg:npm/@nocobase/plugin-field-sequence

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@nocobase/plugin-field-sequence/-/plugin-field-sequence-2.1.23.tgz

Timeline

First seen 11 Jul 2026 13:14 UTC
First analyzed 11 Jul 2026 13:19 UTC
Last analyzed 11 Jul 2026 13:39 UTC
Last updated 11 Jul 2026 13:39 UTC

Labeling

Label unknown
Label source forager
Traits version ca852