Open-source atomic malware analysis

Analyze another

peter-evans/create-pull-request 38e0b6e68b4c852a5500a94740f0e535e0d7ba54

UNKNOWN
Verdict: BENIGN
“A GitHub action to create a pull request for changes to your repository in the actions workspace”
Mal-ecule
K₂(AmLi₂)O(S)H₅(Cm₁₆Db₁₀F₅Os₇Po₉)Md₆(Bk₄LiPa₆Pt)
Size 1.3 MB download unavailable
First seen 3 days ago
Analyzed 2 days ago
Ecosystem github

Referenced by 1 sample

Well-known

notable severity, 98% confident.
app/development GitLab release update method
notable severity, 99% confident.
lib/format iconv-lite string decoder implementation
notable severity, 99% confident.
lib/web whatwg-url basicURLParse API marker

Objectives

notable severity, 96% confident.
supply-chain/credential-theft GitHub Actions OIDC environment variables

Micro-behaviors

notable severity, 94% confident.
communications/proxy Target host is loopback or wildcard IPv4
notable severity, 100% confident.
communications/socket JavaScript outbound socket connection
notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 95% confident.
data/decode Inline alphabet-table index lookup
notable severity, 93% confident.
data/source/property Runs a high-iteration JavaScript loop
notable severity, 95% confident.
fs/directory Shell changes working directory
notable severity, 93% confident.
os/package-manager Invokes a global npm package installation
notable severity, 94% confident.
process/create/shell GitHub Actions creates and pushes a tag
notable severity, 95% confident.
process/interpreter Access to process.binding

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 96% confident.
package/quality Node proxy-agent CONNECT TLS upgrade client
notable severity, 95% confident.
package/testing Jest test framework

20 of 64 traits shown

Identity

SHA-256 8b478d8f233cd650f9f3cd9f34c0dd1a6f55155e6b74012aba257ed628a317b4
Canonical SHA-256 00f811be9d9d171ff72e32aa318e9722554e18bdac78e454a15ec812719b23de
Filename 38e0b6e68b4c852a5500a94740f0e535e0d7ba54
Package peter-evans/create-pull-request
Version 38e0b6e68b4c852a5500a94740f0e535e0d7ba54
PURL pkg:github/peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54

Timeline

First seen 11 Aug 2026 18:17 UTC
First analyzed 11 Aug 2026 18:24 UTC
Last analyzed 12 Aug 2026 20:12 UTC
Last updated 12 Aug 2026 20:11 UTC

Labeling

Label unknown
Label source upload
Traits version 73866