Local reference
Suspicious dependency
Inferred
Mal-ecule
K₂(LiTe)H₄(Cm₁₂CrDbF)Md(Bk₂)
Referenced by 10 samples
- benign v0.0.0-20220923133551-a9d6cd05ce16.zip fetched
- benign v0.0.0-20220920173710-40a97e772155.zip fetched
- benign v0.0.0-20220912143136-8904a8ccb902.zip fetched
- benign v0.0.0-20221020160732-5ab48e5d5b7b.zip fetched
- benign v0.0.0-20221011154458-d44ea5b648d4.zip fetched
- benign v0.0.0-20220917234504-760402acd0e5.zip fetched
- benign v0.0.0-20220919100110-299b209de552.zip fetched
- benign v0.0.0-20220922194254-ec1ff86c46dc.zip fetched
- benign v0.0.0-20220912142947-f91f58c3bff0.zip fetched
- benign v0.0.0-20220920131721-8bffcde17e97.zip fetched
Well-known
notable severity, 98% confident.
lib/format
Go source generated with the protobuf runtime
notable severity, 99% confident.
tool/development
Go module cache source archive go.mod member
Micro-behaviors
notable severity, 95% confident.
communications
Imports google.golang.org/grpc package
notable severity, 90% confident.
communications/http
curl sends request body with -d
notable severity, 92% confident.
communications/http/download
Curl fetches GitHub release metadata
notable severity, 90% confident.
communications/http/header
Native HTTP JSON content type
notable severity, 95% confident.
communications/http/lib
Constructs a Go HTTP client
notable severity, 85% confident.
communications/http/request
curl HTTP client call
notable severity, 95% confident.
crypto/hash
Go FNV-1a hash constructor
notable severity, 85% confident.
data/serialize
Go JSON marshal call
notable severity, 80% confident.
fs/directory
Shell invokes mkdir command
component severity, 70% confident.
fs
Contains the grep command keyword
Metadata
notable severity, 97% confident.
build
Go generated-code header comment
baseline severity, 85% confident.
file
Source has multiple lines over 1000 characters
baseline severity, 100% confident.
file/extension
POSIX shell script extension
baseline severity, 80% confident.
file/profile
English function-word token "that"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 85% confident.
lang
Generated source warning text
Identity
| SHA-256 | 818fdf34071d41c1db98d316ea84a1bcd15ec52166222ecc9c1ee6febe660476 |
|---|---|
| Canonical SHA-256 | 11852c30dc4d6d2b2a7c14727a1770487c38be0256cdf1b98f0b9b1d36f8a8de |
| Filename | v0.0.0-20220910172933-8869f38d8d69.zip |
| Package | github.com/brotherlogic/githubcard |
| Version | v0.0.0-20220910172933-8869f38d8d69 |
| PURL | pkg:golang/github.com/brotherlogic/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/brotherlogic/githubcard/@v/v0.0.0-20220910172933-8869f38d8d69.zip |
Timeline
| First seen | 23 Aug 2026 22:13 UTC |
|---|---|
| First analyzed | 23 Aug 2026 22:14 UTC |
| Last analyzed | 24 Aug 2026 02:37 UTC |
| Last updated | 24 Aug 2026 02:38 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | b8c1c |
Not seeing what you expected? Let us know