Open-source atomic malware analysis

Analyze another

iron-session 8.0.4

UNKNOWN
Verdict: BENIGN
SHA256: 5b7b817ace81a4e27eb5ed2636fd288e1fc2d4e123b557f8e72859cdf6781ee2
Mal-ecule
H₂(CmPo)Md(Pa₆)
Size 15.2 KB download
First seen 24 days ago
Analyzed 15 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Objectives

component severity, 88% confident.
credential-access/env/secrets Env filter pass/secret regex

Micro-behaviors

notable severity, 90% confident.
communications/http Places cookie data in request object
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 85% confident.
communications/ipc Uses serialise function
component severity, 95% confident.
communications/url Encoded URL references MDN documentation

Metadata

notable severity, 85% confident.
package Package has development workflow scripts
notable severity, 90% confident.
package/manifest Repository uses GitHub shorthand
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
component severity, 100% confident.
file High comment-to-code ratio
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 5b7b817ace81a4e27eb5ed2636fd288e1fc2d4e123b557f8e72859cdf6781ee2
Canonical SHA-256 19eb24621f3789e9e147918b1e84d38aaffe3545e6bb62b06393f3d25420e772
Filename [email protected]
Package iron-session
Version 8.0.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/iron-session/-/iron-session-8.0.4.tgz

Timeline

First seen 3 Aug 2026 02:02 UTC
First analyzed 3 Aug 2026 02:03 UTC
Last analyzed 11 Aug 2026 17:52 UTC
Last updated 11 Aug 2026 17:51 UTC

Labeling

Label unknown
Traits version c0cd9