Local reference
Suspicious dependency
Inferred
Mal-ecule
O₂(As₂S₂)H(Po)
Objectives
baseline severity, 85% confident.
anti-static/obfuscation/eval
Trailing IIFE closure indicating auto-execution
component severity, 100% confident.
anti-static/obfuscation
JavaScript or TypeScript source file extension
component severity, 70% confident.
supply-chain/metadata-anomaly/markers
Small file under 5KB
component severity, 80% confident.
supply-chain/trojanized/application
References JavaScript export boundary
Micro-behaviors
component severity, 88% confident.
process/create/shell
Indirect WScript.Shell Run invocation
Metadata
baseline severity, 100% confident.
lang/encoded
JavaScript file basename
Identity
| SHA-256 | 50f9be3ed84ba7f56250c731e98af1b7a2839421fea0b5a92dfa1345a2f3ab85 |
|---|---|
| Filename | _xany.js |
Origin
| Source | harvest |
|---|---|
| Ecosystem | npm |
Timeline
| First seen | 24 Apr 2026 16:14 UTC |
|---|---|
| Last analyzed | 30 Apr 2026 05:14 UTC |
| Last updated | 30 Apr 2026 05:14 UTC |
Labeling
| Label | good |
|---|---|
| Label source | harvest |
| Traits version | f6eaa |
Not seeing what you expected? Let us know