Open-source atomic malware analysis

Analyze another

@cline/core 0.0.69

UNKNOWN
Verdict: HOSTILE
SHA256: 75fc76a4557a5b5b45bc800b762f430c5c94acf992cd7a3464fcc7e94fa1e067 · 92%
Mal-ecule
K₂(AmLi₂)O₃(CaPS)H₆(Cm₁₉Db₁₁F₄Os₄Po₁₂Ti)Md₂(Pa₆)
Size 859.1 KB download
First seen 1 day ago
Analyzed 1 day ago
Package pkg:npm/%40cline/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Well-known

notable severity, 99% confident.
app Cline official source repository
notable severity, 99% confident.
lib Camera/liveness component marker

Objectives

notable severity, 96% confident.
supply-chain/trojanized/app Skill targets a cloud credential store

Micro-behaviors

notable severity, 90% confident.
communications/http/client Reads fetch response as a stream
notable severity, 90% confident.
communications/http/header References HTTP Content-Type application/json
notable severity, 90% confident.
communications/proxy WebRTC STUN or TURN relay configuration
notable severity, 96% confident.
data/serialize JSON serialization includes refresh-token field
notable severity, 93% confident.
fs/path/application AI agent skill install directory
notable severity, 95% confident.
fs/path/sensitive AWS config file path
notable severity, 94% confident.
process/create/vcs Updates a Git reference

Metadata

notable severity, 96% confident.
package/testing/harness Defines a test-case function

20 of 60 traits shown

Identity

SHA-256 75fc76a4557a5b5b45bc800b762f430c5c94acf992cd7a3464fcc7e94fa1e067
Canonical SHA-256 0107885009b1db3ba8a7043119834cf83d1bac8b750aab449335ab7cb80e8c10
Filename core-0.0.69.tgz
Package @cline/core
Version 0.0.69
PURL pkg:npm/%40cline/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@cline/core/-/core-0.0.69.tgz

Timeline

First seen 3 Aug 2026 06:06 UTC
First analyzed 3 Aug 2026 06:08 UTC
Last analyzed 3 Aug 2026 06:08 UTC
Last updated 3 Aug 2026 06:06 UTC

Labeling

Label unknown
Label source upload
Traits version 935ec