Open-source atomic malware analysis

Analyze another

abortcontroller-polyfill 1.7.3

UNKNOWN
Verdict: BENIGN
SHA256: 649075f1aaa97f995a36b0104fa5bde3b615c6fd1c7c9b7b825c187a78666902
“Polyfill/ponyfill for the AbortController DOM API + optional patching of fetch (stub that calls catch, doesn't actually abort request).”
Mal-ecule
O(S)H₂(CmPo)Md(Pa₂)
Size 12.4 KB download
First seen 16 days ago
Analyzed 12 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Objectives

notable severity, 85% confident.
supply-chain/install-hook/package Mature version package with incomplete copied metadata
component severity, 95% confident.
supply-chain/install-hook/scripts prepare runs package-manager build

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
process/hook fetch API hooking
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 86% confident.
data/control-flow Starts a synchronous function expression
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
baseline severity, 90% confident.
build Babel class-call-check helper
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest declares no runtime dependencies
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

Identity

SHA-256 649075f1aaa97f995a36b0104fa5bde3b615c6fd1c7c9b7b825c187a78666902
Canonical SHA-256 2f9dce83c64053c8721b39f4d62c16abe7b32dab8a8b69bbbf621a93cdc56b34
Filename [email protected]
Package abortcontroller-polyfill
Version 1.7.3
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/abortcontroller-polyfill/-/abortcontroller-polyfill-1.7.3.tgz

Timeline

First seen 11 Aug 2026 11:34 UTC
First analyzed 11 Aug 2026 11:32 UTC
Last analyzed 15 Aug 2026 21:14 UTC
Last updated 15 Aug 2026 21:12 UTC

Labeling

Label unknown
Traits version 73866