Open-source atomic malware analysis

Analyze another

actions/upload-artifact 6f51ac03b9356f520e9adb1b1b7802705f340c2b

UNKNOWN
Verdict: BENIGN
SHA256: 50a3156c8abca250392b594ac79d612bcb2618d25146717621c188dfd2fc5bcf
Mal-ecule
K₂(Li₂Te)H₇(Cm₂₉Cr₃Db₁₉F₇HfOs₅Po₈)Md₆(Bk₂LiPa₅Pt)
Size 2.1 MB download
First seen 16 days ago
Analyzed 2 days ago
Package pkg:github/actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
Ecosystem github
Source codeload.github.com

Referenced by 6 samples

Well-known

notable severity, 99% confident.
lib/web whatwg-url basicURLParse API marker
notable severity, 96% confident.
tool/development AutoRest code-generator header comment

Micro-behaviors

notable severity, 95% confident.
communications/http HTTP DELETE route method field
notable severity, 94% confident.
communications/http/request Source parses a bytes HTTP range expression
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 94% confident.
data Creates Node.js Buffer from JSON serialization
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 94% confident.
data/decode Masks character code to one byte
notable severity, 94% confident.
data/encode Assigns character code to array element
notable severity, 95% confident.
data/source/syntax Assigns user identity fields to an object
notable severity, 95% confident.
data/string Searches an inline alphabet table
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars
notable severity, 96% confident.
os/package-manager References npm audit command
notable severity, 94% confident.
process/create/shell Invokes a Windows shell in command mode

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 95% confident.
package/testing Jest test framework

20 of 67 traits shown

Identity

SHA-256 50a3156c8abca250392b594ac79d612bcb2618d25146717621c188dfd2fc5bcf
Canonical SHA-256 1e03c48c7b8774a8af2e32685d1d42e32b089be7bf617de5fc3dea47276f55c9
Filename upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b
Package actions/upload-artifact
Version 6f51ac03b9356f520e9adb1b1b7802705f340c2b
PURL pkg:github/actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b

Origin

Source x
Feed pkg.go.dev
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/upload-artifact/tar.gz/6f51ac03b9356f520e9adb1b1b7802705f340c2b

Timeline

First seen 11 Aug 2026 22:55 UTC
First analyzed 11 Aug 2026 22:55 UTC
Last analyzed 25 Aug 2026 22:05 UTC
Last updated 25 Aug 2026 22:08 UTC

Labeling

Label unknown
Traits version 8a455