Open-source atomic malware analysis

Analyze another

@assetshop/verify-cli 99.0.0

NPM
Verdict: HOSTILE
SHA256: 76a9e0f5e171b7fc4c1fd7650066768b9f1b5568e64f4099650af03a9cd6a76f · 100%
AI Supply chain attack with data exfiltration
Mal-ecule
O₄(S₇CDy₂Eu)H₄(Cm₄Db₂Os₂Po₃)Md₂(Pa₄In)
Size 829 B download
First seen 1 day ago
Analyzed 1 day ago
Package pkg:npm/%40assetshop/[email protected]
Ecosystem javascript
Source r.cnpmjs.org
Also detected by osv+4 more

Loading file contents…

Loading traits…

Identity

SHA-256 76a9e0f5e171b7fc4c1fd7650066768b9f1b5568e64f4099650af03a9cd6a76f
Canonical SHA-256 42f8c2d002724cf200e641c4ad59e1f76b187bb91c96469d31f4fe34b2cdfd61
Filename @assetshop-verify-cli-99.0.1.tgz
Package @assetshop/verify-cli
Version 99.0.0
PURL pkg:npm/%40assetshop/[email protected]

Origin

Source forager
Feed github-advisories
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/@assetshop/verify-cli/-/verify-cli-99.0.1.tgz

Timeline

First seen 12 Aug 2026 15:49 UTC
First analyzed 12 Aug 2026 17:40 UTC
Last analyzed 12 Aug 2026 17:40 UTC
Last updated 12 Aug 2026 17:40 UTC

Labeling

Label bad
Label source promoter
Traits version 73866