Open-source atomic malware analysis

Analyze another

vfile 6.0.1

UNKNOWN
Verdict: BENIGN
SHA256: 91c147fb461f3c6263c88ac7f6d4c8fb2f16ba44c10c10e69fe4746be65d5031
“Virtual file format for text processing”
Mal-ecule
H₃(Cm₂Db₂Po)Md(Pa₄)
Size 18.4 KB download
First seen 15 days ago
Analyzed 10 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 6 samples

Objectives

component severity, 82% confident.
anti-static/obfuscation/control-flow Constant-return helpers dominate the functions
component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
data/format Markdown contains an HTML h1 heading
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 75% confident.
communications/ip Source references the localhost hostname
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 88% confident.
communications/http Calls a matcher in a conditional expression
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 95% confident.
package/files Filename is package.json
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 91c147fb461f3c6263c88ac7f6d4c8fb2f16ba44c10c10e69fe4746be65d5031
Canonical SHA-256 2ab53e9c44aba24a236833575a006b4096001cb75327e106709d0943a90e8e67
Filename vfile-6.0.1.tgz
Package vfile
Version 6.0.1
PURL pkg:npm/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/vfile/-/vfile-6.0.1.tgz

Timeline

First seen 10 Aug 2026 22:20 UTC
First analyzed 11 Aug 2026 07:33 UTC
Last analyzed 15 Aug 2026 21:55 UTC
Last updated 15 Aug 2026 21:53 UTC

Labeling

Label unknown
Label source upload
Traits version 73866