Open-source atomic malware analysis

Analyze another

actions/upload-artifact v2

UNKNOWN
Verdict: BENIGN
SHA256: 8bea7f615112a8e49187aae05ceae462727e43c788d95be2b763909960fe7438
Mal-ecule
H₅(Cm₁₃Db₁₀F₆Os₃Po₂)Md₄(Bk₂InPa₅)
Size 180.9 KB download
First seen 15 days ago
Analyzed 7 days ago
Package pkg:github/actions/upload-artifact@v2
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Micro-behaviors

notable severity, 88% confident.
communications/http Authorization header property assignment
notable severity, 90% confident.
communications/http/header References the Retry-After header name
notable severity, 90% confident.
communications/http/url Cleartext http:// URL
notable severity, 90% confident.
communications/socket Node TLS check disabled by option
notable severity, 88% confident.
data Converts Node.js Buffer output to text
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 94% confident.
data/source/function Defines telemetry-style handler function
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 90% confident.
fs/file/write Node asynchronously writes a file
notable severity, 90% confident.
fs/write/file JavaScript file write operation
notable severity, 88% confident.
os/module Imports at least two Node system modules

Metadata

notable severity, 95% confident.
build Action input references workflow secret
notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 95% confident.
package/files JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
notable severity, 95% confident.
package/testing Jest test framework

20 of 44 traits shown

Identity

SHA-256 8bea7f615112a8e49187aae05ceae462727e43c788d95be2b763909960fe7438
Canonical SHA-256 4a2766030e15c2991baed7142d51f90f802034ada69b83a9c9b1482576279257
Filename upload-artifact@v2
Package actions/upload-artifact
Version v2
PURL pkg:github/actions/upload-artifact@v2

Origin

Source x
Feed pkg.go.dev
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/upload-artifact/tar.gz/v2

Timeline

First seen 11 Aug 2026 16:07 UTC
First analyzed 11 Aug 2026 16:06 UTC
Last analyzed 19 Aug 2026 09:50 UTC
Last updated 19 Aug 2026 09:48 UTC

Labeling

Label unknown
Traits version 7ee52