“mutate a copy of data without changing the original source”
AI
legitimate npm package
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(DbPo)Md(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 85% confident.
data/serialize
Serializes an identifier as JSON
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 95% confident.
package/testing
Jest test framework
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
baseline severity, 90% confident.
package/testing/harness
Test, spec, or fixture file
baseline severity, 100% confident.
package/testing/presence
File identified as a test by path or name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
component severity, 95% confident.
package/files
Filename is package.json
Identity
| SHA-256 | 6c198b2e696c8ecbd0b3101bc5ea7745cc2825bdb7429592b6f507e9952e9663 |
|---|---|
| Canonical SHA-256 | 12747a1db40a60e18a4b0df188e3064078b8674a031932a33bc96b429c4a3d7f |
| Filename | immutability-helper-2.7.0.tgz |
| Package | immutability-helper |
| Version | 2.7.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/immutability-helper/-/immutability-helper-2.7.0.tgz |
Timeline
| First seen | 23 Aug 2026 09:53 UTC |
|---|---|
| First analyzed | 23 Aug 2026 10:51 UTC |
| Last analyzed | 23 Aug 2026 11:28 UTC |
| Last updated | 23 Aug 2026 11:30 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 63cf1 |
Not seeing what you expected? Let us know