Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(CmDbOs)Md₂(Pa₃)
Referenced by 9 samples
- hostile github.com-exponentjs-exponent-v0.0.0-20260609183622-9e672a8f5a52.zip fetched
- benign github.com-genshinsim-gcsim-v1.15.2-0.20251202034752-9c76a1cb2444.zip fetched
- hostile github.com-exponentjs-exponent-v0.0.0-20260818174014-5a8d9956303c.zip fetched
- benign github.com-RefinEdev-refine-v3.0.8+incompatible.zip fetched
- benign github.com-mdshamoon-glific-frontend-v0.8.6.zip fetched
- hostile github.com-expo-expo-v0.0.0-20260603121001-83f11e3f9d8d.zip fetched
- benign github.com-Writeopia-Writeopia-v0.58.0.zip fetched
- suspicious github.com-expo-expo-v0.0.0-20260218220524-56a8ee612c66.zip fetched
- benign github.com-mdshamoon-glific-frontend-v4.4.2-0.20260724074402-8c5765dd7494+incompatible.zip fetched
Micro-behaviors
notable severity, 88% confident.
communications/url
Browser creates an object URL
notable severity, 90% confident.
os/module
Dynamically imports a non-relative module path
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
build
JavaScript file under a distribution directory
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 98% confident.
lang/encoded
ESM wrapper helper
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 85411cf7809133677277e23fd9339f0faea99645c4ab5a2a57c14ede1de8379a |
|---|---|
| Canonical SHA-256 | 1c7df9059884af43760cf6fefeaf0a66e9462f3c425d1b731aad5571b4115be0 |
| Filename | [email protected] |
| Package | dash-video-element |
| Version | 0.3.2 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/dash-video-element/-/dash-video-element-0.3.2.tgz |
Timeline
| First seen | 11 Aug 2026 12:24 UTC |
|---|---|
| First analyzed | 11 Aug 2026 12:22 UTC |
| Last analyzed | 19 Aug 2026 01:50 UTC |
| Last updated | 19 Aug 2026 01:50 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know