Open-source atomic malware analysis

Analyze another

@mastra/slack

NPM
Verdict: SUSPICIOUS
AI Dependency contains dropper script pattern
Mal-ecule
K(Li)O(C₂)H₄(Cm₁₂Cr₅Db₉Os₅)Md₂(Pa₅)
Size 502.4 KB download
First seen 48 days ago
Analyzed 1 day ago
Package pkg:npm/%40mastra/slack
Ecosystem javascript

Loading file contents…

Loading traits…

Identity

SHA-256 658fbb04fd02e40ebc6d0f4b4e70fc2f06e4cd7e068906a5183650d719f50b52
Canonical SHA-256 00bcd227d8e70bfd3c9f3ba9d8d8930c9a2c1eba5871b745ffe48089ad395d69
Filename @mastra-slack-1.3.0.tgz
Package @mastra/slack
PURL pkg:npm/%40mastra/slack

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@mastra/slack/-/slack-1.3.0.tgz

Timeline

First seen 17 Jun 2026 03:23 UTC
First analyzed 17 Jun 2026 03:40 UTC
Last analyzed 3 Aug 2026 16:37 UTC
Last updated 3 Aug 2026 16:37 UTC

Labeling

Label unknown
Label source forager
Traits version 935ec