Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 70e92dea767de65728e52eff051de1517d3545ca1a60125b216d67aea17ecb79
Mal-ecule
H₂(FPo)Md(Pa₄)
Size 5.2 KB download
First seen 1 day ago
Analyzed 18 hours ago
Ecosystem go

Referenced by 3 samples

Micro-behaviors

notable severity, 85% confident.
fs/file Package script deletes files
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile English function-word token "and"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/testing/harness Node.js test filename pattern
baseline severity, 100% confident.
package/testing/presence File identified as a test by path or name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

Identity

SHA-256 70e92dea767de65728e52eff051de1517d3545ca1a60125b216d67aea17ecb79
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 28 Aug 2026 02:23 UTC
First analyzed 28 Aug 2026 02:20 UTC
Last analyzed 28 Aug 2026 15:12 UTC
Last updated 28 Aug 2026 15:15 UTC

Labeling

Label unknown