Open-source atomic malware analysis

Analyze another

actions/upload-artifact v3.0.0

UNKNOWN
Verdict: BENIGN
SHA256: 854697c72eec8ca6e0a196687e13274c21fd9b5663aeb7cd8efaebd5a5a75096
Mal-ecule
H₅(Cm₁₂Db₉F₆Os₃Po₂)Md₃(Bk₂InPa₆)
Size 264.4 KB download
First seen 2 days ago
Analyzed 1 day ago
Package pkg:github/actions/[email protected]
Ecosystem github
Source codeload.github.com

Referenced by 5 samples

Micro-behaviors

notable severity, 88% confident.
communications/http Authorization header property assignment
notable severity, 90% confident.
communications/http/header References the Retry-After header name
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
communications/socket Node TLS check disabled by option
notable severity, 88% confident.
data Converts Node.js Buffer output to text
notable severity, 90% confident.
data/compress Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 90% confident.
fs/file/write Node asynchronously writes a file
notable severity, 90% confident.
fs/write/file JavaScript file write operation
notable severity, 88% confident.
os/module Imports at least two Node system modules

Metadata

notable severity, 95% confident.
build Code follows a source map directive
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
notable severity, 95% confident.
package/testing Jest test framework
notable severity, 96% confident.
package/testing/harness Calls a test-case function

20 of 41 traits shown

Identity

SHA-256 854697c72eec8ca6e0a196687e13274c21fd9b5663aeb7cd8efaebd5a5a75096
Canonical SHA-256 4a2766030e15c2991baed7142d51f90f802034ada69b83a9c9b1482576279257
Filename [email protected]
Package actions/upload-artifact
Version v3.0.0
PURL pkg:github/actions/[email protected]

Origin

Source x
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/upload-artifact/tar.gz/v3.0.0

Timeline

First seen 24 Aug 2026 19:19 UTC
First analyzed 24 Aug 2026 19:16 UTC
Last analyzed 25 Aug 2026 04:02 UTC
Last updated 25 Aug 2026 04:04 UTC

Labeling

Label unknown
Traits version 72034