Open-source atomic malware analysis

Analyze another

globals 16.0.0

UNKNOWN
Verdict: BENIGN
SHA256: 6825a1ff724e1968fcb90456aad369ca35eca789c459e4ce4de358ee726738a0
“Global identifiers from different JavaScript environments”
Mal-ecule
K(Te)H₂(DbPo)Md₂(Pa₃)
Size 25.2 KB download
First seen 17 days ago
Analyzed 13 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Well-known

notable severity, 98% confident.
tool/development GitHub CodeQL Action source archive member

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format
component severity, 95% confident.
supply-chain/install-hook/scripts prepare runs package-manager build

Micro-behaviors

notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 95% confident.
package/testing Mocha test framework markers
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 95% confident.
package/files Filename is package.json
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

Identity

SHA-256 6825a1ff724e1968fcb90456aad369ca35eca789c459e4ce4de358ee726738a0
Canonical SHA-256 2998fa25447dc5e0032334703ccec8604d66b750afb5b84e13eb778bf66fbb38
Filename globals-16.0.0.tgz
Package globals
Version 16.0.0
PURL pkg:npm/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/globals/-/globals-16.0.0.tgz

Timeline

First seen 11 Aug 2026 22:09 UTC
First analyzed 11 Aug 2026 22:16 UTC
Last analyzed 16 Aug 2026 03:15 UTC
Last updated 16 Aug 2026 03:14 UTC

Labeling

Label unknown
Label source upload
Traits version 73866