Open-source atomic malware analysis

Analyze another

@vitest/eslint-plugin 1.1.39

UNKNOWN
Verdict: BENIGN
“Eslint plugin for vitest”
Mal-ecule
H₂(Cm₂Db)Md₂(Pa₅)
Size 60.4 KB download
First seen 10 days ago
Analyzed 10 days ago
Ecosystem javascript

Referenced by 1 sample

Objectives

component severity, 95% confident.
anti-static/obfuscation/encoding Many subtraction operators present
component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Sequential source identifier names
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 90% confident.
package/dependencies npm manifest declares no runtime dependencies
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 84644c7c46f4d0ef8a8e7754814b01fa1da3fdc35f7137ec97a591b59978544d
Filename [email protected]
Package @vitest/eslint-plugin
Version 1.1.39
PURL pkg:npm/@vitest/[email protected]

Timeline

First seen 16 Aug 2026 03:13 UTC
First analyzed 16 Aug 2026 03:15 UTC
Last analyzed 16 Aug 2026 03:15 UTC
Last updated 16 Aug 2026 03:13 UTC

Labeling

Label unknown