Local reference
Suspicious dependency
Inferred
Mal-ecule
H(F)Md₂(Bk₂Pa)
Referenced by 10 samples
- benign github.com-approximated-inc-apx-caddy-stats-v0.0.0-20260805230518-b338c48e4b51.zip fetched
- benign github.com-CircleCI-Public-circleci-yaml-language-server-v0.6.1-0.20260805204747-c9a13f55002b.zip fetched
- benign github.com-AustralianCyberSecurityCentre-azul-bedrock-v12-v12.0.88-dev2.zip fetched
- benign go.opentelemetry.io-auto-internal-tools-v0.0.0-20260807233737-e6f372548c1e.zip fetched
- benign github.com-simon-lentz-yammm-v0.11.1-0.20260810173025-c245de6bf568.zip fetched
- benign github.com-Zamua-shale-v0.16.0.zip fetched
- benign github.com-inference-gateway-browser-agent-v0.8.3.zip fetched
- benign github.com-thathaneydude-unifi-v0.4.0.zip fetched
- benign github.com-gexec-gexec-v0.0.0-20260810175040-fa2cf4dd3fac.zip fetched
- benign github.com-NVIDIA-infra-controller-rest-api-v0.0.0-20260812184126-3abaf83f99fc.zip fetched
Micro-behaviors
notable severity, 90% confident.
fs/directory
Creates a directory tree with Go os.MkdirAll
baseline severity, 88% confident.
os/service
GitHub Actions GITHUB_TOKEN secret
Metadata
notable severity, 97% confident.
build
Go generated-code header comment
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
file/profile
English function-word token "the"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 85% confident.
lang
Generated source warning text
Identity
| SHA-256 | 5628d116f14579f246eb67c2980c661fff39b5054fce75255be931cdf6d2ddb6 |
|---|---|
| Canonical SHA-256 | 125bda649b0d2aeb8b8aebc38cc984b3355242fb99477e61f5f2eef141b2e5b1 |
| Filename | [email protected] |
| Package | github.com/kulti/thelper |
| Version | v0.7.1 |
| PURL | pkg:golang/github.com/kulti/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/kulti/thelper/@v/v0.7.1.zip |
Timeline
| First seen | 2 Aug 2026 00:42 UTC |
|---|---|
| First analyzed | 2 Aug 2026 00:44 UTC |
| Last analyzed | 27 Aug 2026 20:24 UTC |
| Last updated | 27 Aug 2026 20:25 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b59b7 |
Not seeing what you expected? Let us know