Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₂CrDb₂)Md(Pa)
Referenced by 1 sample
Objectives
component severity, 92% confident.
collection/file-targeting
Credential-like file path
Micro-behaviors
notable severity, 94% confident.
communications/http
Raw HTTP safe request line
notable severity, 93% confident.
crypto/hash
HMAC-SHA1 operation marker
notable severity, 90% confident.
data/control-flow
JavaScript iterates enumerable object keys
notable severity, 70% confident.
data/encode
URL-encodes data via encodeURIComponent
baseline severity, 80% confident.
data/source/syntax
Copies one indexed array element to another
component severity, 75% confident.
communications/http/request
HTTP protocol version strings
component severity, 95% confident.
communications/url
Encoded URL references MDN documentation
component severity, 90% confident.
data/serialize
Reads JSON-like command property
Metadata
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
file
Source file has low overall entropy
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits devDependencies field
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 100% confident.
lang
CommonJS require symbol
component severity, 95% confident.
package/testing/presence
Default npm-init placeholder test script
Identity
| SHA-256 | 7e9902cae195a64c981cb0d9f104d4ba59da650b18a4820c9856a044eed26169 |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
Timeline
| First seen | 17 Aug 2026 01:03 UTC |
|---|---|
| First analyzed | 17 Aug 2026 01:02 UTC |
| Last analyzed | 17 Aug 2026 01:22 UTC |
| Last updated | 17 Aug 2026 01:22 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know