Open-source atomic malware analysis

Analyze another

espree 9.6.1

UNKNOWN
Verdict: BENIGN
SHA256: 6cd05eb78c766a8164d1f1f3a651a00b409201500ae2afc324f35cf50956181b
“An Esprima-compatible JavaScript parser built on Acorn”
Mal-ecule
H₂(CmPo)Md(Pa₄)
Size 15.9 KB download
First seen 24 days ago
Analyzed 6 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 84% confident.
exfiltration HTTP request writes secret variable
component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 65% confident.
communications/http Token-named field assignment (weak auth signal)
component severity, 90% confident.
data/control-flow Top-level non-require string call

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
notable severity, 95% confident.
package/files JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 100% confident.
lang CommonJS require symbol
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies

Identity

SHA-256 6cd05eb78c766a8164d1f1f3a651a00b409201500ae2afc324f35cf50956181b
Canonical SHA-256 065a841394e12ab4121536cf050d0ce9831d9264aa5c6576c7194291ad68fc90
Filename [email protected]
Package espree
Version 9.6.1
PURL pkg:npm/[email protected]

Origin

Source x
Feed aur.archlinux.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/espree/-/espree-9.6.1.tgz

Timeline

First seen 1 Aug 2026 16:32 UTC
First analyzed 1 Aug 2026 16:33 UTC
Last analyzed 19 Aug 2026 16:45 UTC
Last updated 19 Aug 2026 16:43 UTC

Labeling

Label unknown
Traits version 3bd52