Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(OsPo)Md₂(Pa₃)
Referenced by 10 samples
- benign github.com-box-box-ui-elements-v19.0.0-beta.10+incompatible.zip fetched
- hostile github.com-electricitymap-electricitymap-contrib-v1.195.0.zip fetched
- benign github.com-readmeio-api-explorer-v0.8.1.zip fetched
- benign github.com-stenciljs-core-v1.11.3-0.zip fetched
- benign github.com-HarshCasper-Nest-v6.5.3+incompatible.zip fetched
- benign github.com-iamspark1e-vite-plugin-auto-mpa-html-v1.4.0-rc.1.zip fetched
- benign github.com-HarshCasper-nest-v6.6.0+incompatible.zip fetched
- hostile github.com-electricitymap-electricitymap-contrib-v1.194.0.zip fetched
- benign github.com-gkatsev-video.js-v7.9.5+incompatible.zip fetched
- benign digitalelvis-neuronai-studio-v2.5.0.zip fetched
Micro-behaviors
notable severity, 90% confident.
os/module
Dynamically imports a computed call result
notable severity, 80% confident.
process/io
References Node.js stdout stream
baseline severity, 95% confident.
fs/file/write
Imports the Node fs/promises API
baseline severity, 100% confident.
fs/path
Contains a Windows drive-letter path
component severity, 84% confident.
fs/file
References a package.json path
Metadata
notable severity, 90% confident.
package
Package uses changelog/versioning tooling
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 95% confident.
file/profile
Contains a UI language-label table
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
JavaScript distribution output path
baseline severity, 90% confident.
package/dependencies
npm manifest omits devDependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
baseline severity, 90% confident.
package/testing/harness
WebKit debug() test helper
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 95% confident.
file/format
Inline base64-encoded source map (data URL)
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 812fc45c26577ee5c542d50ce391e9bfa4ad9edc93f0923c8be69b3b9c2f1c57 |
|---|---|
| Canonical SHA-256 | 06b2aa488eb3dc420731bb24b516cacd1f7334b902be2ff6cbdd6dcf875bfa61 |
| Filename | [email protected] |
| Package | conventional-changelog |
| Version | 8.1.2 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/conventional-changelog/-/conventional-changelog-8.1.2.tgz |
Timeline
| First seen | 11 Aug 2026 16:57 UTC |
|---|---|
| First analyzed | 11 Aug 2026 16:55 UTC |
| Last analyzed | 12 Aug 2026 14:52 UTC |
| Last updated | 12 Aug 2026 14:51 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know