“Provides a way to make requests”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₄)
Referenced by 10 samples
- benign @plusscommunities-pluss-newsletter-aws-menu-2.0.13.tgz fetched
- @xyo-network-xl1-s3-providers-4.6.5.tgz fetched
- benign CardSorting.lumi-10.8.0.vsix fetched
- benign client-sts-3.1096.0.tgz fetched
- benign github.com-bluesky-social-atproto-v0.0.0-20260728090730-2de1da2ff2ad.zip fetched
- benign github.com-dirac-run-dirac-v0.4.8-cli.zip fetched
- benign decocms-4.135.0.tgz fetched
- benign CardSorting.lumi-11.0.0.vsix fetched
- github.com-cdklabs-publib-v0.2.767.zip fetched
- suspicious @biffo-cli-0.80.0.tgz fetched
Micro-behaviors
notable severity, 80% confident.
communications/http/request
Calls JavaScript fetch API
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 90% confident.
communications/http
Contains an HTTPS URL prefix
component severity, 90% confident.
communications/http/url
Contains the IPv6 loopback literal
component severity, 95% confident.
communications/url
Encoded URL benign documentation or test context
component severity, 92% confident.
data/control-flow
String literal equality or membership check
component severity, 82% confident.
data/db
SQL password value update
component severity, 80% confident.
data/parse
password/passwd key with inline value
component severity, 82% confident.
process/create/shell
Git HEAD ref literal
Metadata
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
notable severity, 85% confident.
package/quality
Package has multiple entry points
baseline severity, 95% confident.
file/profile
Contains a UI language-label table
baseline severity, 80% confident.
import
Requires a scoped npm package
baseline severity, 100% confident.
lang
Constructs a JavaScript Promise
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 98% confident.
package/testing/presence
DefinitelyTyped package path
component severity, 100% confident.
file/extension
Common web or JSON file extension
Identity
| SHA-256 | 820f4fccbf9261a3fbde156ccbe53348299ad510a38e6049a0a6b15b307612b7 |
|---|---|
| Filename | [email protected] |
| Package | @smithy/fetch-http-handler |
| Version | 5.6.12 |
| PURL | pkg:npm/@smithy/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | npmjs.org |
| Ecosystem | npm |
| URL | https://registry.npmjs.org/@smithy/fetch-http-handler/-/fetch-http-handler-5.6.12.tgz |
Timeline
| First seen | 27 Jul 2026 16:27 UTC |
|---|---|
| First analyzed | 27 Jul 2026 16:29 UTC |
| Last analyzed | 28 Jul 2026 18:59 UTC |
| Last updated | 28 Jul 2026 18:59 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 6a958 |
Not seeing what you expected? Let us know