Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmF)Md(Pa₅)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
fs/file
Package script deletes files
component severity, 86% confident.
data/control-flow
Starts a synchronous function expression
component severity, 90% confident.
data/serialize
JSON-like object command field
Metadata
notable severity, 85% confident.
package
Package declares a prepublish-only script
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile
English function-word token "for"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
JavaScript distribution output path
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
supply-chain
notable severity, 80% confident.
suspicious-package
Suspicious package name: 'webpack-espower-loader'
Identity
| SHA-256 | 95bd273cc030c709228faf36e57044989ca82e9a480eb080b531184bd0aa2dde |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
Timeline
| First seen | 25 Aug 2026 19:31 UTC |
|---|---|
| First analyzed | 25 Aug 2026 19:29 UTC |
| Last analyzed | 25 Aug 2026 19:54 UTC |
| Last updated | 25 Aug 2026 19:56 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know