Open-source atomic malware analysis

Analyze another

pkg:npm/%40textlint/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 810e39f3dbcdca4f3536e9d9f84612054fb9a22a511e99d5e9007c83c5dcb1d4
Mal-ecule
H₃(Cm₂Db₂Os)Md(Pa₆)
Size 45.4 KB download
First seen 1 day ago
Analyzed 1 day ago

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 88% confident.
os/module Dynamically imports a computed module reference
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
baseline severity, 72% confident.
fs/directory Checks whether Node.js entries are directories
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 96% confident.
library Transpiled CommonJS re-export barrel
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepublish' hook that runs during install

Identity

SHA-256 810e39f3dbcdca4f3536e9d9f84612054fb9a22a511e99d5e9007c83c5dcb1d4
Filename pkg:npm/%40textlint/[email protected]

Origin

Source x

Timeline

First seen 28 Aug 2026 22:53 UTC
First analyzed 28 Aug 2026 20:50 UTC
Last analyzed 28 Aug 2026 22:59 UTC
Last updated 28 Aug 2026 23:05 UTC

Labeling

Label unknown