Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: 887c4cce3631c45550894f2771aadae757dbbe1dea96f571ef32f3422f2c387d
Mal-ecule
H(Po)Md₂(Pa₃)
Size 4.2 KB download
First seen 8 days ago
Analyzed 8 days ago
Ecosystem go

Referenced by 1 sample

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 80% confident.
process/io References Node.js stdout stream
baseline severity, 90% confident.
data Constructs a Uint8Array buffer
baseline severity, 80% confident.
process/info Reads Node.js arguments through process.argv

Metadata

notable severity, 80% confident.
file/profile Contains a Cyrillic script sequence
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 84% confident.
build Member under bin/native/prebuilds dir
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 95% confident.
package/files Filename is package.json
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 887c4cce3631c45550894f2771aadae757dbbe1dea96f571ef32f3422f2c387d
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 21 Aug 2026 00:01 UTC
First analyzed 20 Aug 2026 23:59 UTC
Last analyzed 21 Aug 2026 00:03 UTC
Last updated 21 Aug 2026 00:04 UTC

Labeling

Label unknown