Open-source atomic malware analysis

Analyze another

pug-code-gen 2.0.2

UNKNOWN
Verdict: BENIGN
SHA256: 7bd58075a380c7e17b5c61ac019de703a4b9e47a02ccdd78b9449c7155a0f9d1
“Default code-generator for pug. It generates HTML via a JavaScript template function.”
Mal-ecule
Md(Pa₃)
Size 7.7 KB download
First seen 17 days ago
Analyzed 7 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 5 samples

Micro-behaviors

component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
lang JavaScript undefined literal

Identity

SHA-256 7bd58075a380c7e17b5c61ac019de703a4b9e47a02ccdd78b9449c7155a0f9d1
Filename [email protected]
Package pug-code-gen
Version 2.0.2
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/pug-code-gen/-/pug-code-gen-2.0.2.tgz

Timeline

First seen 11 Aug 2026 15:19 UTC
First analyzed 11 Aug 2026 15:18 UTC
Last analyzed 21 Aug 2026 02:36 UTC
Last updated 21 Aug 2026 02:38 UTC

Labeling

Label unknown
Traits version 73866