Open-source atomic malware analysis

Analyze another

anchore/sbom-action e22c389904149dbc22b58101806040fa8d37a610

UNKNOWN
Verdict: BENIGN
SHA256: 96dee1980fa9124184d9f133d13aa8e974603d6e0b423a0ed03e38f5d91277d0
“GitHub Action for creating software bill of materials using Syft.”
Mal-ecule
K₂(LiTe)O₂(CS)H₇(Cm₃₆Cr₂Db₁₆F₈HfOs₆Po₁₀)Md₅(BkLiPa₈)
Size 1.2 MB download
First seen 14 days ago
Analyzed 2 days ago
Package pkg:github/anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Well-known

notable severity, 99% confident.
tool/development/github-actions Anchore sbom-action package name

Micro-behaviors

notable severity, 95% confident.
communications/http HTTP DELETE route method field
notable severity, 90% confident.
communications/http/client Awaits text from a response-like object
notable severity, 95% confident.
communications/http/download References a release download URL path
notable severity, 95% confident.
communications/http/request Builds Token auth header from JS variable
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 92% confident.
crypto/hash Node.js HMAC call in source text
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 94% confident.
data/decode Masks character code to one byte
notable severity, 93% confident.
data/source/property Runs a high-iteration JavaScript loop
notable severity, 100% confident.
fs/file/write Node calls imported writeFileSync
notable severity, 96% confident.
os/package-manager References npm audit command

Metadata

notable severity, 95% confident.
build GitHub issue-comment workflow trigger
notable severity, 99% confident.
file/profile Escaped Unicode script codepoint in source
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript package file under the dist tree
notable severity, 96% confident.
package/quality Node proxy-agent CONNECT TLS upgrade client
notable severity, 92% confident.
vendor Microsoft com.microsoft.* reverse-DNS identifier

20 of 71 traits shown

Identity

SHA-256 96dee1980fa9124184d9f133d13aa8e974603d6e0b423a0ed03e38f5d91277d0
Canonical SHA-256 0109ff67e3c15c451cceb61661edff67b2c2b4e0ac50a6f584345912cb2776cc
Filename sbom-action@e22c389904149dbc22b58101806040fa8d37a610
Package anchore/sbom-action
Version e22c389904149dbc22b58101806040fa8d37a610
PURL pkg:github/anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610

Origin

Source x
Feed brew.sh
Ecosystem github
Domain github.com
URL https://codeload.github.com/anchore/sbom-action/tar.gz/e22c389904149dbc22b58101806040fa8d37a610

Timeline

First seen 11 Aug 2026 17:09 UTC
First analyzed 11 Aug 2026 17:10 UTC
Last analyzed 23 Aug 2026 23:23 UTC
Last updated 23 Aug 2026 23:23 UTC

Labeling

Label unknown
Traits version b8c1c