Open-source atomic malware analysis

Analyze another

pkg:npm/%40opentelemetry/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 66acb4a0ad803a0a2d693eacccfd3a3b387b6a6f5b1612c1f8a2582baf2f1d9a
Mal-ecule
H₂(DbPo)Md(Pa₅)
Size 8.3 KB download
First seen 3 days ago
Analyzed 3 days ago
Ecosystem github

Referenced by 1 sample

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 70% confident.
data/source Function body returns this

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 96% confident.
library Transpiled CommonJS re-export barrel
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest declares no runtime dependencies
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

Identity

SHA-256 66acb4a0ad803a0a2d693eacccfd3a3b387b6a6f5b1612c1f8a2582baf2f1d9a
Filename pkg:npm/%40opentelemetry/[email protected]

Origin

Source x
Ecosystem github

Timeline

First seen 22 Aug 2026 09:42 UTC
First analyzed 22 Aug 2026 09:42 UTC
Last analyzed 22 Aug 2026 12:06 UTC
Last updated 22 Aug 2026 12:06 UTC

Labeling

Label unknown