Open-source atomic malware analysis

Analyze another

express-timer 1.0.5

NPM
Verdict: HOSTILE
SHA256: 7550e1db05f30636ba0c61b09b5647a65d801d6fc9efa181f368a18ed4b41147 · 100%
AI Self-destructing npm package with source wiper
Mal-ecule
O₆(CI₂CaS₅Dy₂Xe)H₃(Cm₄F₄Po₅)Md₂(Pa₃)
Size 7.9 KB download
First seen 47 days ago
Analyzed 47 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source npmjs.org
Also detected by 3 sources

Loading file contents…

Loading traits…

Identity

SHA-256 7550e1db05f30636ba0c61b09b5647a65d801d6fc9efa181f368a18ed4b41147
Canonical SHA-256 0ed7fc907c2df0f4f7900b20f5e5bd7c6b1c08e9c0be871c3448c7c2220c878c
Filename express-timer-1.0.5.tgz
Package express-timer
Version 1.0.5
PURL pkg:npm/[email protected]

Origin

Source harvest
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org

Timeline

First seen 20 Jun 2026 23:23 UTC
First analyzed 20 Jun 2026 23:24 UTC
Last analyzed 20 Jun 2026 23:24 UTC
Last updated 20 Jun 2026 23:24 UTC

Labeling

Label bad
Label source harvest
Traits version 1f35f