Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]?checksum=sha1:4a4d58bfd81bcfcdad920abc7a39e18dae6a7348%2Csha512:4ba6aadf05492f5fbac20351e7c6e70113470bee10dd9669123be33046c5b696fee1c3a86093b2c092ce43e6e5f5b42661d78dff69783e91c804aadaf88d6d7e

UNKNOWN
Verdict: BENIGN
Mal-ecule
H₂(DbPo)Md(Pa₂)
Size 6.9 KB download
First seen 1 day ago
Analyzed 1 day ago
Ecosystem arch

Referenced by 1 sample

Micro-behaviors

notable severity, 100% confident.
data/control-flow Augmented assignment inside while loop
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile English function-word token "and"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 58e4a2dfbd993075922da97e0a7a42e4918c32082f58973ac5ab601e33e6826f
Filename pkg:npm/[email protected]?checksum=sha1:4a4d58bfd81bcfcdad920abc7a39e18dae6a7348%2Csha512:4ba6aadf05492f5fbac20351e7c6e70113470bee10dd9669123be33046c5b696fee1c3a86093b2c092ce43e6e5f5b42661d78dff69783e91c804aadaf88d6d7e

Origin

Source x
Feed aur.archlinux.org
Ecosystem arch

Timeline

First seen 27 Aug 2026 20:10 UTC
First analyzed 27 Aug 2026 20:06 UTC
Last analyzed 27 Aug 2026 20:19 UTC
Last updated 27 Aug 2026 20:21 UTC

Labeling

Label unknown