Open-source atomic malware analysis

Analyze another

hermes-estree 0.23.0

UNKNOWN
Verdict: BENIGN
SHA256: 54e68e128c31cb41e00e46eb049097d0badac640739c71ac2abe03d6f37e9f6f
“Flow types for the Flow-ESTree spec produced by the hermes parser”
Mal-ecule
K(Am)H(Po)Md₂(Pa₃)
Size 41.7 KB download
First seen 1 day ago
Analyzed 1 day ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Well-known

notable severity, 99% confident.
app/development Meta Platforms source copyright header

Micro-behaviors

notable severity, 95% confident.
process/create/shell Shell command variable at a command boundary

Metadata

notable severity, 70% confident.
file Very low comment-to-code ratio in script
notable severity, 95% confident.
package/files JavaScript/TypeScript file under dist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile English function-word token "for"
baseline severity, 90% confident.
lang Code generation source path
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name

Identity

SHA-256 54e68e128c31cb41e00e46eb049097d0badac640739c71ac2abe03d6f37e9f6f
Canonical SHA-256 33a648062768e1dd0ef635f79fb9ba7f46cefa0ad1a1da5f168386de67c69f30
Filename [email protected]
Package hermes-estree
Version 0.23.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/hermes-estree/-/hermes-estree-0.23.0.tgz

Timeline

First seen 28 Aug 2026 12:35 UTC
First analyzed 28 Aug 2026 12:35 UTC
Last analyzed 28 Aug 2026 21:19 UTC
Last updated 28 Aug 2026 21:20 UTC

Labeling

Label unknown
Traits version b59b7