Open-source atomic malware analysis

Analyze another

package.json

PACKAGE.JSON
Verdict: SUSPICIOUS
SHA256: 8dd73102d6052e6a822a746c6673e1f38f3208a87c7d4b789f449834b2decc80
Mal-ecule
O₂(S₈Xe)Md(Pa₂)
Size 321 B download
First seen 117 days ago
Analyzed 111 days ago
Ecosystem malcontent-samples

Objectives

suspicious severity, 95% confident.
supply-chain/install-hook Silent obfuscated npm lifecycle dropper
notable severity, 100% confident.
execution/interpreter/script npm preinstall hook present
notable severity, 92% confident.
supply-chain Lifecycle hook executes inline Node.js code
notable severity, 82% confident.
supply-chain/metadata-anomaly Registry metadata has empty author field
notable severity, 85% confident.
supply-chain/metadata-anomaly/markers Package has install hooks but
component severity, 80% confident.
supply-chain/hidden-payload Package has no recognizable build pipeline
component severity, 72% confident.
supply-chain/impersonation Package has empty author field
component severity, 100% confident.
supply-chain/trojanized/library preinstall hook

Metadata

notable severity, 95% confident.
package Package has preinstall script

execution

notable severity, 90% confident.
script Script 'preinstall' executes node interpreter

supply-chain

suspicious severity, 80% confident.
install-hook Package has 'preinstall' hook that runs during install

Identity

SHA-256 8dd73102d6052e6a822a746c6673e1f38f3208a87c7d4b789f449834b2decc80
Filename package.json

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 30 Apr 2026 15:42 UTC
Last updated 30 Apr 2026 15:42 UTC

Labeling

Label bad
Label source harvest
Traits version f6cf3