Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Po)Md₂(Pa₃)
Referenced by 1 sample
Micro-behaviors
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
component severity, 95% confident.
communications/url
Encoded URL references MDN documentation
component severity, 90% confident.
ui/window
Browser selector targets textarea elements
Metadata
notable severity, 97% confident.
file
Many Base64-like comment spans in JavaScript
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
supply-chain
notable severity, 80% confident.
install-hook
Package has 'prepublish' hook that runs during install
Identity
| SHA-256 | 80e0a2414291bbb88980a726c10121d8ccebc17c14750392e29bbb3d26f1cd05 |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Ecosystem | golang |
Timeline
| First seen | 23 Aug 2026 11:30 UTC |
|---|---|
| First analyzed | 23 Aug 2026 11:28 UTC |
| Last analyzed | 23 Aug 2026 11:28 UTC |
| Last updated | 23 Aug 2026 11:30 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know