Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
Mal-ecule
H₃(Cm₂CrDb₂)Md(Pa)
Size 6.7 KB download
First seen 3 days ago
Analyzed 3 days ago
Ecosystem go

Referenced by 1 sample

Objectives

component severity, 92% confident.
collection/file-targeting Credential-like file path

Micro-behaviors

notable severity, 94% confident.
communications/http Raw HTTP safe request line
notable severity, 93% confident.
crypto/hash HMAC-SHA1 operation marker
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 70% confident.
data/encode URL-encodes data via encodeURIComponent
baseline severity, 80% confident.
data/source/syntax Copies one indexed array element to another
component severity, 75% confident.
communications/http/request HTTP protocol version strings
component severity, 95% confident.
communications/url Encoded URL references MDN documentation
component severity, 90% confident.
data/serialize Reads JSON-like command property

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 100% confident.
lang CommonJS require symbol
component severity, 95% confident.
package/testing/presence Default npm-init placeholder test script

Identity

SHA-256 7e9902cae195a64c981cb0d9f104d4ba59da650b18a4820c9856a044eed26169
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 17 Aug 2026 01:03 UTC
First analyzed 17 Aug 2026 01:02 UTC
Last analyzed 17 Aug 2026 01:22 UTC
Last updated 17 Aug 2026 01:22 UTC

Labeling

Label unknown