Open-source atomic malware analysis

Analyze another

@vertexa/prisma-fetch-engine 7.9.1

NPM
Verdict: HOSTILE
SHA256: 51ee5554dcc3017c2f8fa110a240e9894acbf93891d7e94b6722d9ca8274c619 · 92%
“Fork of @prisma/fetch-engine — downloads and caches Prisma Rust engine binaries from GitHub Releases. Internal package consumed by @vertexa…”
AI Trojanized Prisma fork impersonates official package
Mal-ecule
O(S₃)H₇(Cm₁₉CrDb₁₀F₇Os₇Po₁₁Ti)Md₃(Pa₆)
Size 511.5 KB download
First seen 15 days ago
Analyzed 14 days ago
Package pkg:npm/@vertexa/[email protected]
Ecosystem javascript
Source r.cnpmjs.org
Also detected by osv

Loading file contents…

Loading traits…

Identity

SHA-256 51ee5554dcc3017c2f8fa110a240e9894acbf93891d7e94b6722d9ca8274c619
Canonical SHA-256 02f20090f1bc92dfbbcb83f689054b299cecc1a80f4842df96f48a80bbfaaf86
Filename @vertexa-prisma-fetch-engine-7.9.1.tgz
Package @vertexa/prisma-fetch-engine
Version 7.9.1
PURL pkg:npm/@vertexa/[email protected]

Origin

Source forager
Feed supplychainattack.org
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/@vertexa/prisma-fetch-engine/-/prisma-fetch-engine-7.9.1.tgz

Timeline

First seen 9 Aug 2026 14:28 UTC
First analyzed 10 Aug 2026 08:14 UTC
Last analyzed 10 Aug 2026 08:14 UTC
Last updated 10 Aug 2026 08:14 UTC

Labeling

Label bad
Label source promoter
Traits version 73866