Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₅)
Referenced by 2 samples
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
baseline severity, 82% confident.
data/string
Searches strings with includes or indexOf
component severity, 86% confident.
data/control-flow
Starts a synchronous function expression
Metadata
notable severity, 85% confident.
package
Package declares a prepublish-only script
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
English function-word token "for"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 87cd9b5406008977c67795f819d603956ed635ce7a3f8aac237ec03d556b498e |
|---|---|
| Filename | pkg:npm/%40opentelemetry/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | wolfi.dev |
| Ecosystem | wolfi |
Timeline
| First seen | 16 Aug 2026 05:27 UTC |
|---|---|
| First analyzed | 16 Aug 2026 05:25 UTC |
| Last analyzed | 25 Aug 2026 19:13 UTC |
| Last updated | 25 Aug 2026 19:14 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know