Open-source atomic malware analysis

Analyze another

@inquirer/editor 5.0.7

NPM
Verdict: BENIGN
“Inquirer multiline editor prompt”
Mal-ecule
Md(Pa₅)
Size 3.9 KB download
First seen 16 days ago
Analyzed 16 days ago
Ecosystem javascript
Also detected by 1 source

Referenced by 4 samples

Objectives

component severity, 90% confident.
supply-chain/impersonation/package Republished package claims an upstream author

Micro-behaviors

component severity, 95% confident.
communications/url Encoded URL benign documentation or test context
component severity, 92% confident.
data/control-flow String literal equality or membership check
component severity, 100% confident.
data/encode References the toString method
component severity, 80% confident.
data/format/office References a document filename suffix

Metadata

notable severity, 90% confident.
package/manifest npm package is configured for public publishing
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 80% confident.
import Requires a scoped npm package
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 96% confident.
library JavaScript distribution output path
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 75% confident.
package/keywords Package declares keywords
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/dependencies Package has runtime dependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

20 of 21 traits shown

Identity

SHA-256 a78a2b6e105feaeff4f4909397959c46ed9d7800e0e1408680770328819e293f
Filename [email protected]
Package @inquirer/editor
Version 5.0.7
PURL pkg:npm/@inquirer/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@inquirer/editor/-/editor-5.0.7.tgz

Timeline

First seen 12 Aug 2026 19:17 UTC
First analyzed 12 Aug 2026 19:19 UTC
Last analyzed 13 Aug 2026 03:32 UTC
Last updated 13 Aug 2026 03:32 UTC

Labeling

Label unknown
Traits version 73866