Open-source atomic malware analysis

Analyze another

@pnpm-deps.status-1100.0.18.tgz

TAR.GZ
Verdict: BENIGN
SHA256: 585e4cd68976a7c6d45d2fc89410c58e6f2d25c16359acbff58ab48f12b36d1d
Mal-ecule
O(S)H(Po)Md(Pa₇)
Size 7.3 KB download
First seen 24 days ago
Analyzed 24 days ago
Ecosystem javascript
Source npmjs.org

Objectives

suspicious severity, 82% confident.
supply-chain/metadata-anomaly npm package version major 40+
component severity, 100% confident.
anti-static/obfuscation/code-metrics Comment-heavy source context

Micro-behaviors

notable severity, 82% confident.
process/create/shell pnpm package install command
baseline severity, 80% confident.
fs/enumerate References common system/dev directory names

Metadata

notable severity, 85% confident.
package Package has multiple entry points
notable severity, 90% confident.
package/fields Package has TypeScript types entry
baseline severity, 95% confident.
import imports import
baseline severity, 95% confident.
import/npm::jest imports @jest/globals from 30.3.0
baseline severity, 95% confident.
import/npm::pnpm imports @pnpm/prepare from 1100.0.10
baseline severity, 95% confident.
import/npm::pnpm/config imports @pnpm/config.parse-overrides from 1100.0.1
baseline severity, 95% confident.
import/npm::pnpm/crypto imports @pnpm/crypto.object-hasher from 1100.0.0
baseline severity, 95% confident.
import/npm::pnpm/deps imports @pnpm/deps.status from 1100.0.18
baseline severity, 95% confident.
import/npm::pnpm/installing imports @pnpm/installing.context from 1100.0.12
baseline severity, 95% confident.
import/npm::pnpm/lockfile imports @pnpm/lockfile.settings-checker from 1100.0.12
baseline severity, 95% confident.
import/npm::pnpm/resolving imports @pnpm/resolving.resolver-base from 1100.3.0
baseline severity, 95% confident.
import/npm::pnpm/workspace imports @pnpm/workspace.projects-reader from 1101.0.7
baseline severity, 95% confident.
import/npm::types imports @types/ramda from 0.31.1
baseline severity, 99% confident.
lang TypeScript declaration file (.d.ts/.d.cts/.d.mts)
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 90% confident.
package/testing/presence Package uses Jest testing framework

20 of 33 traits shown

Identity

SHA-256 585e4cd68976a7c6d45d2fc89410c58e6f2d25c16359acbff58ab48f12b36d1d
Canonical SHA-256 078db316839f6e4559f53de6e5a8a6985c4d7143398232ecc197515cdc06f0a3
Filename @pnpm-deps.status-1100.0.18.tgz
Package @pnpm
Version 1100.0.18

Origin

Source harvest
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org

Timeline

First seen 24 May 2026 05:07 UTC
First analyzed 24 May 2026 08:26 UTC
Last analyzed 24 May 2026 08:26 UTC
Last updated 24 May 2026 08:26 UTC

Labeling

Label unknown
Label source harvest
Traits version 9ea7c