Open-source atomic malware analysis

Analyze another

is-glob 4.0.1

UNKNOWN
Verdict: BENIGN
SHA256: 8b57563403911ae1fb38cb960dfe47c1c103d11dfa0eabd739dde3dc945ab90c
“Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses extern…”
Mal-ecule
K(Te)H(Cm)Md(Pa₂)
Size 4.0 KB download
First seen 25 days ago
Analyzed 1 day ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Well-known

notable severity, 98% confident.
tool/development/github-actions GitHub CodeQL Action source archive member

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name

Identity

SHA-256 8b57563403911ae1fb38cb960dfe47c1c103d11dfa0eabd739dde3dc945ab90c
Filename [email protected]
Package is-glob
Version 4.0.1
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz

Timeline

First seen 1 Aug 2026 14:26 UTC
First analyzed 1 Aug 2026 14:28 UTC
Last analyzed 25 Aug 2026 06:44 UTC
Last updated 25 Aug 2026 06:44 UTC

Labeling

Label unknown
Traits version 72034