Open-source atomic malware analysis

Analyze another

github.com/salesforcecommercecloud/pwa-kit v3.14.0-nightly-20251013080213+incompatible

ZIP
Verdict: HOSTILE
SHA256: 9fc99c91cdca463ec5a44787bbaba681c85088bbee9e8c1aec8ccd4f3404be0d · 92%
AI preinstall exfils to OOB callback
Mal-ecule
K(Li₄)O₄(S₄C₂AsEu)H₉(Cm₅₃CrDb₂₂F₁₃HfOs₁₂Po₁₉Ti₃U₇)Md₆(BkInLiPa₁₅)
Size 5.1 MB download
First seen 20 days ago
Analyzed 2 days ago
Package pkg:golang/github.com/salesforcecommercecloud/[email protected]+incompatible
Ecosystem go
Source proxy.golang.org

Loading file contents…

Loading traits…

Identity

SHA-256 9fc99c91cdca463ec5a44787bbaba681c85088bbee9e8c1aec8ccd4f3404be0d
Canonical SHA-256 0001518e4588c5138f5b5a122c023ead0da924db3bdb3933020d8c1f563b1bf1
Filename github.com-salesforcecommercecloud-pwa-kit-v3.14.0-nightly-20251013080213+incompatible.zip
Package github.com/salesforcecommercecloud/pwa-kit
Version v3.14.0-nightly-20251013080213+incompatible
PURL pkg:golang/github.com/salesforcecommercecloud/[email protected]+incompatible

Origin

Source forager
Feed pkg.go.dev
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/salesforcecommercecloud/pwa-kit/@v/v3.14.0-nightly-20251013080213+incompatible.zip

Timeline

First seen 6 Aug 2026 11:45 UTC
First analyzed 24 Aug 2026 10:07 UTC
Last analyzed 24 Aug 2026 10:16 UTC
Last updated 24 Aug 2026 10:16 UTC

Labeling

Label unknown
Label source forager
Traits version d5c9e