Open-source atomic malware analysis

Analyze another

github.com/subosito/gotenv v1.4.1

UNKNOWN
Verdict: BENIGN
SHA256: 8a4468ab0e49d730116acd47911ebfa217e8237707bf7662671f10864be24372
Mal-ecule
H₂(FOs)Md₂(BkPa)
Size 14.5 KB download
First seen 27 days ago
Analyzed 13 days ago
Package pkg:golang/github.com/subosito/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
fs/directory Creates a directory tree with Go os.MkdirAll
notable severity, 90% confident.
os/env Go sets a process environment variable

Metadata

notable severity, 95% confident.
build Step environment references an Actions secret
notable severity, 88% confident.
package/files Archive packages dotenv file
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 80% confident.
package/testing/harness Go test function name
baseline severity, 70% confident.
package/testing/presence Go test file suffix

Identity

SHA-256 8a4468ab0e49d730116acd47911ebfa217e8237707bf7662671f10864be24372
Filename [email protected]
Package github.com/subosito/gotenv
Version v1.4.1
PURL pkg:golang/github.com/subosito/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/subosito/gotenv/@v/v1.4.1.zip

Timeline

First seen 2 Aug 2026 00:42 UTC
First analyzed 2 Aug 2026 00:44 UTC
Last analyzed 15 Aug 2026 14:56 UTC
Last updated 15 Aug 2026 14:56 UTC

Labeling

Label unknown
Traits version 73866