Open-source atomic malware analysis

Analyze another

petgraph 0.8.3

UNKNOWN
Verdict: HOSTILE
SHA256: 8701b58ea97060d5e5b155d383a69952a60943f0e6dfe30b04c287beb0b27455 · 92%
“Graph data structure library. Provides graph types and graph algorithms.”
Mal-ecule
O(S)H₂(DbF)Md₂(Bk₂Pa)
Size 788.6 KB download
First seen 3 days ago
Analyzed 2 days ago
Package pkg:cargo/[email protected]
Installs 450,720,364
Ecosystem crates
Source static.crates.io

Referenced by 3 samples

Objectives

hostile severity, 99% confident.
supply-chain/trojanized External PR head receives workflow secrets
component severity, 90% confident.
execution/automation Skill names an external destination

Micro-behaviors

notable severity, 85% confident.
fs/file/write Writes a file with Rust fs::write
component severity, 85% confident.
process/create Terminal tool name

Metadata

notable severity, 95% confident.
package/testing/harness Rust test framework
baseline severity, 85% confident.
package/manifest Cargo package has version

Identity

SHA-256 8701b58ea97060d5e5b155d383a69952a60943f0e6dfe30b04c287beb0b27455
Canonical SHA-256 010d831ff87e78a39f21d8932865b21a70774392c40cf5aee0c71516a919b152
Filename [email protected]
Package petgraph
Version 0.8.3
PURL pkg:cargo/[email protected]

Origin

Source x
Feed aur.archlinux.org
Ecosystem crates
Domain crates.io
URL https://static.crates.io/crates/petgraph/petgraph-0.8.3.crate

Timeline

First seen 2 Aug 2026 13:02 UTC
First analyzed 2 Aug 2026 13:04 UTC
Last analyzed 3 Aug 2026 07:33 UTC
Last updated 3 Aug 2026 07:32 UTC

Labeling

Label unknown
Traits version 3e1ed