“Unescape strings with escape sequences written out as literal characters.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Os)Md₂(BkPa₂)
Referenced by 4 samples
- benign github.com-bazelbuild-bazel-central-registry-v0.0.0-20260810171937-8736f9cf9c40.zip fetched
- benign github.com-bazelbuild-bazel-central-registry-v0.0.0-20260721201700-13b74ef66199.zip fetched
- suspicious sdroxide-1.1.0-1.src.tar.gz fetched
- benign reachpy-0.1.2a3-cp310-cp310-manylinux_2_28_x86_64.whl fetched
Micro-behaviors
notable severity, 90% confident.
os/network
String literal containing UNC path syntax
baseline severity, 90% confident.
os/service
GitHub Actions cargo publish step
Metadata
notable severity, 92% confident.
build
Job grants contents write permission
notable severity, 96% confident.
package/files
Archive contains tea.xyz reward manifest
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 85% confident.
package/manifest
Cargo package declares license
baseline severity, 100% confident.
package/testing/presence
File identified as a test by path or name
Identity
| SHA-256 | 7285e83a80ce76f5e7bce79fa41f68d78ba62d1003cf27bf748ab24413808cf4 |
|---|---|
| Canonical SHA-256 | 5bb404a5b88a22882983a4772c1ecf9e6607efca48bef1e8236822dd96a0433b |
| Filename | [email protected] |
| Package | unescaper |
| Version | 0.1.10 |
| PURL | pkg:cargo/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | crates |
| Domain | crates.io |
| URL | https://static.crates.io/crates/unescaper/unescaper-0.1.10.crate |
Timeline
| First seen | 10 Aug 2026 11:40 UTC |
|---|---|
| First analyzed | 10 Aug 2026 11:38 UTC |
| Last analyzed | 20 Aug 2026 08:57 UTC |
| Last updated | 20 Aug 2026 08:56 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | efa45 |
Not seeing what you expected? Let us know