Open-source atomic malware analysis

Analyze another

@astrojs/starlight 0.41.4

NPM
Verdict: BENIGN
SHA256: 7eaac8f33a5dd7434c19f68fbb77bd34a17af6045ddefb80ab4fddba4d1d6258
“Build beautiful, high-performance documentation websites with Astro”
Mal-ecule
H₆(CmDb₇F₄Os₂Po₃U₃)Md₄(LiPaPt)
Size 332.7 KB download
First seen 36 days ago
Analyzed 30 days ago
Package pkg:npm/@astrojs/[email protected]
Ecosystem npm
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 86% confident.
data/control-flow Invokes zero-argument function at module scope
notable severity, 90% confident.
data/db Writes browser storage with setItem
notable severity, 94% confident.
data/encode JavaScript comment contains Base64-like content
notable severity, 90% confident.
data/serialize JavaScript parses YAML with yaml.load
notable severity, 82% confident.
data/source/property Calls a property using bracket notation
notable severity, 84% confident.
fs/enumerate Calls Node.js synchronous directory enumeration
notable severity, 90% confident.
fs/file Calls readFileSync
notable severity, 80% confident.
fs/path Hardcoded absolute home directory path
notable severity, 90% confident.
os/module ESM side-effect-only package import
notable severity, 80% confident.
process/create child_process fork of a script path
notable severity, 90% confident.
process/create/shell Calls spawnSync() to run a child process
notable severity, 90% confident.
process/hook/console Reassigns console.warn method
notable severity, 90% confident.
ui/window Reads value from current browser target
notable severity, 88% confident.
ui/window/manage Registers browser click event listener

Metadata

notable severity, 80% confident.
file/profile Contains Arabic or Urdu script
notable severity, 80% confident.
lang JavaScript has at least two self-comparisons
notable severity, 85% confident.
library Code uses middleware pattern

20 of 80 traits shown

Identity

SHA-256 7eaac8f33a5dd7434c19f68fbb77bd34a17af6045ddefb80ab4fddba4d1d6258
Filename [email protected]
Package @astrojs/starlight
Version 0.41.4
PURL pkg:npm/@astrojs/[email protected]

Origin

Source forager
Feed github.com
Ecosystem npm
URL https://registry.npmjs.org/@astrojs/starlight/-/starlight-0.41.4.tgz

Timeline

First seen 22 Jul 2026 18:25 UTC
First analyzed 22 Jul 2026 18:27 UTC
Last analyzed 28 Jul 2026 00:04 UTC
Last updated 28 Jul 2026 00:04 UTC

Labeling

Label unknown
Traits version 01566