Open-source atomic malware analysis

Analyze another

actions/checkout v2.3.3

UNKNOWN
Verdict: BENIGN
“Action for checking out a repo”
Mal-ecule
H₆(Cm₂₃Db₁₅F₁₄Os₇Po₁₁Ti)Md₄(BkInLi₂Pa₇)
Size 266.1 KB download
First seen 15 days ago
Analyzed 6 days ago
Ecosystem github

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
communications/http/header Custom HTTP token header line
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 96% confident.
communications/http/services GitHub GraphQL API endpoint
notable severity, 90% confident.
communications/socket Node TLS check disabled by option
notable severity, 90% confident.
data Creates Node.js Buffer from UTF-8 text
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/string Reverses string with split reverse join
notable severity, 95% confident.
fs/directory Shell changes working directory
notable severity, 92% confident.
process/create JavaScript launches a script interpreter
notable severity, 94% confident.
process/create/vcs JavaScript Git repository query command

Metadata

notable severity, 95% confident.
build Code follows a source map directive
notable severity, 95% confident.
package/files JavaScript package file under the dist tree

20 of 61 traits shown

Identity

SHA-256 93ee9dafc7de31803dbd94d7a17c19d14a3008a5996b477f49a6f5f6a8449e44
Canonical SHA-256 022859d2211d80a4f11edbe9120c9b33ed4a9854a8ca3e585f50c81c35090fb3
Filename v2.3.3
Package actions/checkout
Version v2.3.3
PURL pkg:github/actions/[email protected]

Origin

Source upload
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/checkout/tar.gz/v2.3.3

Timeline

First seen 12 Aug 2026 00:18 UTC
First analyzed 12 Aug 2026 00:37 UTC
Last analyzed 21 Aug 2026 06:33 UTC
Last updated 21 Aug 2026 06:33 UTC

Labeling

Label unknown
Label source upload
Traits version 73866