Open-source atomic malware analysis

Analyze another

conventional-changelog-writer 4.0.7

UNKNOWN
Verdict: BENIGN
SHA256: 899cceba247d859c8901f4cb8051c30bd7298349bee35cde71e63e13a6f60318
“Write logs based on conventional commits and templates”
Mal-ecule
H₄(Db₃FOsPo)Md(Pa₅)
Size 13.5 KB download
First seen 16 days ago
Analyzed 7 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Micro-behaviors

notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 88% confident.
data/source/dynamic Loads a computed module with Node.js require
notable severity, 90% confident.
data/string Dense concatenated string fragments
notable severity, 90% confident.
fs/file Reads files with Node.js
notable severity, 90% confident.
os/module CommonJS require inside try fallback
notable severity, 80% confident.
process/io References Node.js stdout stream
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 90% confident.
package Package uses changelog/versioning tooling
notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 80% confident.
package/quality Code imports CLI argument parsers
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 70% confident.
import Imports the Node.js fs module
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension

Identity

SHA-256 899cceba247d859c8901f4cb8051c30bd7298349bee35cde71e63e13a6f60318
Canonical SHA-256 78467f2cb3cd4f902f08b37f45210ca736185990c8cef5e50153d3926aac4031
Filename [email protected]
Package conventional-changelog-writer
Version 4.0.7
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/conventional-changelog-writer/-/conventional-changelog-writer-4.0.7.tgz

Timeline

First seen 11 Aug 2026 22:44 UTC
First analyzed 11 Aug 2026 22:46 UTC
Last analyzed 21 Aug 2026 02:51 UTC
Last updated 21 Aug 2026 02:52 UTC

Labeling

Label unknown
Traits version 73866