Open-source atomic malware analysis

Analyze another

pkg:npm/%40chakra-ui/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 508dc6035fa973c3d19618d18985f00ecb3a0ee823011919851835ac0cf9c451
Mal-ecule
H₂(DbPo)Md(Pa₅)
Size 175.2 KB download
First seen 13 days ago
Analyzed 6 days ago
Ecosystem go

Referenced by 5 samples

Objectives

component severity, 82% confident.
anti-static/obfuscation/control-flow Six / more no-arg constant-return helpers

Micro-behaviors

notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 90% confident.
process/create/load ESM side-effect-only local import
component severity, 90% confident.
ui/window Browser selector targets input elements

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 90% confident.
package/manifest npm package is configured for public publishing
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 508dc6035fa973c3d19618d18985f00ecb3a0ee823011919851835ac0cf9c451
Filename pkg:npm/%40chakra-ui/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 12 Aug 2026 14:20 UTC
First analyzed 12 Aug 2026 14:20 UTC
Last analyzed 19 Aug 2026 08:34 UTC
Last updated 19 Aug 2026 08:32 UTC

Labeling

Label unknown