Open-source atomic malware analysis

Analyze another

emmet 2.4.6

UNKNOWN
Verdict: BENIGN
SHA256: 7614089dcb9c3c8a4e458da2eec1480caf53ec9950f74113a740b61e9ab91dc0
“Emmet — the essential toolkit for web-developers”
Mal-ecule
H₂(Cm₂Db)Md₂(Pa₅)
Size 192.8 KB download
First seen 15 days ago
Analyzed 10 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Objectives

component severity, 95% confident.
anti-static/obfuscation/encoding Many subtraction operators present

Micro-behaviors

notable severity, 90% confident.
communications/http/url Contains a hardcoded insecure HTTP URL
notable severity, 90% confident.
data/decode JavaScript hex-to-integer conversion
baseline severity, 100% confident.
data/encode parseInt with radix 16
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 90% confident.
data/serialize JSON-like object command field
component severity, 90% confident.
ui/window Browser selector targets input elements
component severity, 90% confident.
ui/window/manage CSS visibility hidden declaration

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 80% confident.
file/profile Contains a Cyrillic script sequence
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
component severity, 100% confident.
file/extension File uses a source declaration extension

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

20 of 24 traits shown

Identity

SHA-256 7614089dcb9c3c8a4e458da2eec1480caf53ec9950f74113a740b61e9ab91dc0
Canonical SHA-256 09f55b92445b08b0f9ef1568bed85672a1d05b78fb27e8b70fa1e5a86444d6e7
Filename [email protected]
Package emmet
Version 2.4.6
PURL pkg:npm/[email protected]

Origin

Source x
Feed aur.archlinux.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/emmet/-/emmet-2.4.6.tgz

Timeline

First seen 11 Aug 2026 19:33 UTC
First analyzed 11 Aug 2026 19:34 UTC
Last analyzed 16 Aug 2026 05:18 UTC
Last updated 16 Aug 2026 05:16 UTC

Labeling

Label unknown
Traits version 73866