Open-source atomic malware analysis

Analyze another

@stacksjs/composables

NPM
Verdict: SUSPICIOUS
SHA256: 7a1b416cd7869f396792c7175be5928d7689216aaeb80467dab3607a806dc7b3 · 54%
“Stacks composables powered by stx reactivity.”
AI README suggests remote shell installer
Mal-ecule
O₂(CS)H₅(Cm₁₂Db₆OsPo₃U₄)Md(Pa₄)
Size 83.4 KB download
First seen 4 hours ago
Analyzed 4 hours ago
Package pkg:npm/%40stacksjs/composables
Ecosystem javascript
Source registry.npmjs.org

Loading file contents…

Loading traits…

Identity

SHA-256 7a1b416cd7869f396792c7175be5928d7689216aaeb80467dab3607a806dc7b3
Canonical SHA-256 018848f9a40e71ba3f591c8c9178935590363a7ff8d38c2696a40f8f917d1f29
Filename @stacksjs-composables-0.70.161.tgz
Package @stacksjs/composables
PURL pkg:npm/%40stacksjs/composables

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@stacksjs/composables/-/composables-0.70.161.tgz

Timeline

First seen 21 Jul 2026 12:44 UTC
First analyzed 21 Jul 2026 12:48 UTC
Last analyzed 21 Jul 2026 12:48 UTC
Last updated 21 Jul 2026 12:48 UTC

Labeling

Label unknown
Label source forager
Traits version 16794