Local reference
Suspicious dependency
Inferred
Mal-ecule
H₅(Cm₆Db₃F₃Os₂Po)
Referenced by 2 samples
Well-known
baseline severity, 92% confident.
tool/detection
Secret-scanner rule named for a credential kind
Micro-behaviors
notable severity, 90% confident.
communications/http
HTTP Cookie request header token
notable severity, 90% confident.
communications/http/url
Cleartext http:// URL
notable severity, 90% confident.
communications/proxy
Loopback proxy endpoint with explicit port
notable severity, 90% confident.
communications/url
Parses a URL with net/url
notable severity, 90% confident.
data/serialize
Unmarshals YAML data in Go
notable severity, 80% confident.
data/source/dynamic
Repeated Go reflection API usage
notable severity, 90% confident.
fs/directory
Creates a directory tree with Go os.MkdirAll
notable severity, 90% confident.
fs/file
os.OpenFile creates a new file
notable severity, 90% confident.
fs/file/write
Go writes data with os.WriteFile
notable severity, 90% confident.
os/random/prng
Go math/rand integer generation call
notable severity, 95% confident.
process/create
Creates a child process with Go exec.Command
baseline severity, 75% confident.
communications/ip
Source references the localhost hostname
component severity, 90% confident.
communications/dns
Go source names host or DNS context
Metadata
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 85% confident.
lang
Generated source warning text
20 of 21 traits shown
Identity
| SHA-256 | 7a5bfbeb1fbbbf54760fbf7bf8bffc0e7448cbbe4fb1551bbbb61614d91a969a |
|---|---|
| Canonical SHA-256 | 042ed8a6d7eb107794b809dd2b1e54ae8f91c02fd218f898039a5802b05a0c58 |
| Filename | [email protected] |
| Package | k8s.io/component-base |
| Version | v0.29.2 |
| PURL | pkg:golang/k8s.io/[email protected] |
Origin
| Source | x |
|---|---|
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/k8s.io/component-base/@v/v0.29.2.zip |
Timeline
| First seen | 11 Aug 2026 19:49 UTC |
|---|---|
| First analyzed | 11 Aug 2026 19:11 UTC |
| Last analyzed | 21 Aug 2026 12:13 UTC |
| Last updated | 21 Aug 2026 12:14 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know