Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: a3efe1d616173ece3720f1ac89c76ac0bfcf03e76d88d9c0ee396f19faf58d6c
Mal-ecule
H₂(DbPo)Md(Pa₂)
Size 6.3 KB download
First seen 9 days ago
Analyzed 1 day ago
Ecosystem go

Referenced by 2 samples

Micro-behaviors

notable severity, 90% confident.
data/decode Calls JavaScript unescape
notable severity, 80% confident.
process/io References Node.js stdout stream
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
baseline severity, 80% confident.
data/string JavaScript split with variable delimiter
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile English function-word token "for"
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 100% confident.
lang References the JavaScript .length property

Identity

SHA-256 a3efe1d616173ece3720f1ac89c76ac0bfcf03e76d88d9c0ee396f19faf58d6c
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 21 Aug 2026 07:50 UTC
First analyzed 21 Aug 2026 07:48 UTC
Last analyzed 28 Aug 2026 11:55 UTC
Last updated 28 Aug 2026 11:56 UTC

Labeling

Label unknown