Open-source atomic malware analysis

Analyze another

trezor-lib 1.0.3

NPM
Verdict: HOSTILE
SHA256: 7defe2b8dd83a11460e35902492ec9a0571ffb100a41421e8a1efa030c298ddb · 100%
“Essential utility library for crypto development”
AI Malicious npm package exfiltrates credentials
Mal-ecule
O₄(EuS₂Ca₃Dy₃)H₅(Cm₃CrF₄OsPo)Md(In)
Size 1.0 KB download
First seen 14 days ago
Analyzed 14 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by osv+5 more

Loading file contents…

Loading traits…

Identity

SHA-256 7defe2b8dd83a11460e35902492ec9a0571ffb100a41421e8a1efa030c298ddb
Canonical SHA-256 1f5dd5e9e5ac2c78f7e8597fc4c6e5431b8ae244ebcc27329089cc5578986af7
Filename trezor-lib-1.0.3.tgz
Package trezor-lib
Version 1.0.3
PURL pkg:npm/[email protected]

Origin

Source forager
Feed osv.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/trezor-lib/-/trezor-lib-1.0.3.tgz

Timeline

First seen 5 Aug 2026 09:03 UTC
First analyzed 5 Aug 2026 12:49 UTC
Last analyzed 5 Aug 2026 12:49 UTC
Last updated 5 Aug 2026 12:49 UTC

Labeling

Label bad
Label source forager
Traits version b5ca8