Local reference
Suspicious dependency
Inferred
Mal-ecule
H(U)Md₂(Pa)
Referenced by 5 samples
- suspicious v0.7.2.zip fetched
- benign github.com-tomas-vilte-matecommit-v1.8.1-0.20260731200736-e6f371c43e64.zip fetched
- benign github.laiyagushi.com-filecoin-project-lily-v0.18.0.zip fetched
- suspicious v0.0.0-20260813095258-0e0340a01b57.zip fetched
- benign github.com-yugabyte-yugabyte-db-managed-yba-cli-v0.0.0-20260804190447-7b100f3d4706.zip fetched
Micro-behaviors
notable severity, 80% confident.
ui
Go x/term terminal library import
component severity, 90% confident.
data/serialize
JSON-like object result field
Metadata
notable severity, 80% confident.
file/profile
Contains Hiragana or Katakana script
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
Identity
| SHA-256 | 86dd652439e03693d6d6477ffb40f066b974ab847a6606a2a3db8416e1a92648 |
|---|---|
| Canonical SHA-256 | 2e32b2849c59e3b6427ba0d5bbd424ad867e38cac17d6f22cbbd49756e9415f3 |
| Filename | v1.23.0.zip |
| Package | github.com/briandowns/spinner |
| Version | v1.23.0 |
| PURL | pkg:golang/github.com/briandowns/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/briandowns/spinner/@v/v1.23.0.zip |
Timeline
| First seen | 10 Aug 2026 22:21 UTC |
|---|---|
| First analyzed | 11 Aug 2026 06:37 UTC |
| Last analyzed | 24 Aug 2026 22:39 UTC |
| Last updated | 24 Aug 2026 22:39 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
Not seeing what you expected? Let us know