Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
Mal-ecule
H₂(CmF)Md(Pa₅)
Size 4.1 KB download
First seen 3 days ago
Analyzed 3 days ago
Ecosystem go

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
fs/file Package script deletes files
component severity, 86% confident.
data/control-flow Starts a synchronous function expression
component severity, 90% confident.
data/serialize JSON-like object command field

Metadata

notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile English function-word token "for"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 96% confident.
library JavaScript distribution output path
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
suspicious-package Suspicious package name: 'webpack-espower-loader'

Identity

SHA-256 95bd273cc030c709228faf36e57044989ca82e9a480eb080b531184bd0aa2dde
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 25 Aug 2026 19:31 UTC
First analyzed 25 Aug 2026 19:29 UTC
Last analyzed 25 Aug 2026 19:54 UTC
Last updated 25 Aug 2026 19:56 UTC

Labeling

Label unknown