Open-source atomic malware analysis

Analyze another

peter-evans/create-pull-request 67ccf781d68cd99b580ae25a5c18a1cc84ffff1f

UNKNOWN
Verdict: BENIGN
SHA256: 8529d5b4da88dcda1b8f737dd0c53d91bc3354dd7ef19a352d3acd532e64c646
“A GitHub action to create a pull request for changes to your repository in the actions workspace”
Mal-ecule
K(Am)O₂(CS)H₈(Cm₃₀CrDb₁₅F₅Os₈Po₈Ti)Md₇(Bk₄InLiPa₆Pt)
Size 974.4 KB download unavailable
First seen 3 days ago
Analyzed 3 days ago
Package pkg:github/peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
Ecosystem github
Source codeload.github.com

Referenced by 2 samples

Well-known

notable severity, 98% confident.
app/development GitLab release update method

Objectives

notable severity, 96% confident.
supply-chain/credential-theft GitHub Actions OIDC environment variables

Micro-behaviors

notable severity, 94% confident.
browser-extension Derives an origin from a browser URL
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 94% confident.
communications/proxy Target host is IPv6 loopback
notable severity, 100% confident.
communications/socket JavaScript outbound socket connection
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 94% confident.
data/encode JavaScript comment contains Base64-like content
notable severity, 93% confident.
data/source/property Runs a high-iteration JavaScript loop
notable severity, 95% confident.
fs/directory Shell changes working directory
notable severity, 93% confident.
os/package-manager Invokes a global npm package installation
notable severity, 94% confident.
process/create/shell GitHub Actions creates and pushes a tag

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 97% confident.
file Many Base64-like comment spans in JavaScript
notable severity, 96% confident.
package/quality Node proxy-agent CONNECT TLS upgrade client
notable severity, 95% confident.
package/testing Jest test framework

20 of 72 traits shown

Identity

SHA-256 8529d5b4da88dcda1b8f737dd0c53d91bc3354dd7ef19a352d3acd532e64c646
Canonical SHA-256 18371a74cc233390794b9063e4214e458dc230bf0d7ae554bb6bee0b1eca2ea1
Filename create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
Package peter-evans/create-pull-request
Version 67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
PURL pkg:github/peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f

Origin

Source x
Feed pkg.go.dev
Ecosystem github
Domain github.com
URL https://codeload.github.com/peter-evans/create-pull-request/tar.gz/67ccf781d68cd99b580ae25a5c18a1cc84ffff1f

Timeline

First seen 11 Aug 2026 22:50 UTC
First analyzed 11 Aug 2026 22:51 UTC
Last analyzed 11 Aug 2026 23:14 UTC
Last updated 11 Aug 2026 23:13 UTC

Labeling

Label unknown
Traits version 73866