Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(Cm₂Po)Md(Pa₃)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http/header
References the Retry-After header name
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 90% confident.
data
Constructs a Uint8Array buffer
component severity, 95% confident.
communications/url
Encoded URL references MDN documentation
component severity, 86% confident.
data/control-flow
Starts a synchronous function expression
component severity, 90% confident.
data/serialize
JSON-like object result field
component severity, 90% confident.
data/source/syntax
Object literal declares a hostname key
Metadata
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 70% confident.
file
Very low whitespace ratio (minified/compressed)
baseline severity, 80% confident.
file/profile
English function-word token "this"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
Transpiled CommonJS re-export barrel
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 5c5407a199e6217bd8d84d70e4c473349c0c9dd54447526765ee8a777b824711 |
|---|---|
| Filename | pkg:npm/%40smithy/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | opensourcemalware.com |
| Ecosystem | github |
Timeline
| First seen | 24 Aug 2026 14:30 UTC |
|---|---|
| First analyzed | 24 Aug 2026 14:28 UTC |
| Last analyzed | 24 Aug 2026 15:19 UTC |
| Last updated | 24 Aug 2026 15:19 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know