Local reference
Suspicious dependency
Inferred
Mal-ecule
H(F)Md₂(BkPa)
Referenced by 10 samples
- benign github.com-approximated-inc-apx-caddy-stats-v0.0.0-20260805230518-b338c48e4b51.zip fetched
- hostile github.com-aws-karpenter-provider-aws-tools-kubereplay-v0.0.0-20260817163923-a1255c3200e4.zip fetched
- benign v0.16.0.zip fetched
- benign v3.6.11.zip fetched
- benign v0.99.0.zip fetched
- suspicious github.com-chrisliu1995-AlibabaCloud-NLB-Pool-Operator-v0.2.1.zip fetched
- suspicious v0.125.0.zip fetched
- benign v0.159.0.zip fetched
- benign github.com-thanhminhmr-go-httpserver-v0.0.8.zip fetched
- benign v0.7.5.zip fetched
Micro-behaviors
notable severity, 90% confident.
fs/file
Recursive directory deletion
Metadata
notable severity, 95% confident.
build
Action input references workflow secret
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
Identity
| SHA-256 | 4f9b84b659dea0f46b036655fd3bd81a608de982fe2456e38637dc9eb24faf0d |
|---|---|
| Canonical SHA-256 | 257e4151e9ccd38617af13e381c4031ffbdd5a4580c9ba1156cf068831f85086 |
| Filename | [email protected] |
| Package | go.uber.org/multierr |
| Version | v1.10.0 |
| PURL | pkg:golang/go.uber.org/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | golang |
| Domain | golang.org |
| URL | https://proxy.golang.org/go.uber.org/multierr/@v/v1.10.0.zip |
Timeline
| First seen | 1 Aug 2026 19:08 UTC |
|---|---|
| First analyzed | 1 Aug 2026 19:09 UTC |
| Last analyzed | 27 Aug 2026 14:56 UTC |
| Last updated | 27 Aug 2026 14:57 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b59b7 |
Not seeing what you expected? Let us know