Open-source atomic malware analysis

Analyze another

@vue/compiler-sfc 3.3.4

UNKNOWN
Verdict: BENIGN
SHA256: 85f710074f1893d62403af9dcdeb856765ca45cfd6dc025848cc0e8e30868a1d
“@vue/compiler-sfc”
Mal-ecule
O(S)H₇(Cm₄CrDb₁₃FOs₃Po₅U)Md₄(Li₂Pa₄Pt)
Size 483.8 KB download
First seen 17 days ago
Analyzed 10 days ago
Package pkg:npm/@vue/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Objectives

notable severity, 90% confident.
supply-chain/hidden-payload Node module compile call

Micro-behaviors

notable severity, 90% confident.
communications/http/url Cleartext http:// URL
notable severity, 90% confident.
crypto/hash Node.js createHash('md4') call
notable severity, 88% confident.
data Converts Node.js Buffer output to text
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 94% confident.
data/source/function Defines telemetry-style handler function
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 94% confident.
os/api-resolution Constructs Node module via module.constructor
notable severity, 90% confident.
os/module CommonJS require inside a catch fallback
notable severity, 90% confident.
process/create/shell References a shell executable
notable severity, 95% confident.
process/interpreter Node Module._compile runtime-code method

Metadata

notable severity, 96% confident.
lang/encoded Over 1000 Unicode escapes in JavaScript
notable severity, 90% confident.
library File contains lodash library
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry

20 of 44 traits shown

Identity

SHA-256 85f710074f1893d62403af9dcdeb856765ca45cfd6dc025848cc0e8e30868a1d
Filename [email protected]
Package @vue/compiler-sfc
Version 3.3.4
PURL pkg:npm/@vue/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.3.4.tgz

Timeline

First seen 12 Aug 2026 12:12 UTC
First analyzed 12 Aug 2026 12:14 UTC
Last analyzed 19 Aug 2026 04:52 UTC
Last updated 19 Aug 2026 04:58 UTC

Labeling

Label unknown
Traits version 298c2