Open-source atomic malware analysis

Analyze another

pkg:npm/%40cloudflare/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: a85b094eabc7c8858613764992694d0b70f2bdfd0dbdcd864c2a4ccdce22c376
Mal-ecule
K(Am)H₃(Cm₆CrDb₂)Md₂(Pa)
Size 1.5 MB download
First seen 18 days ago
Analyzed 5 days ago
Ecosystem go

Referenced by 2 samples

Well-known

notable severity, 98% confident.
app/development Cloudflare worker test helper marker

Micro-behaviors

notable severity, 78% confident.
communications/http LLM function call streaming event
notable severity, 90% confident.
communications/http/request Calls the browser sendBeacon method
notable severity, 88% confident.
communications/http/services DeepSeek reasoning_content response field
notable severity, 90% confident.
communications/http/url HTTP encode/decode endpoint path
notable severity, 92% confident.
crypto/hash Node.js constant-time comparison call
notable severity, 86% confident.
data/decode JavaScript invokes a Base64 decoder
notable severity, 82% confident.
data/format/media Declares an image MIME type
baseline severity, 70% confident.
data Calls a Base64 conversion helper
baseline severity, 72% confident.
fs/directory Checks whether Node.js entries are directories
component severity, 95% confident.
communications/url Contains an inline image data URI

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
vendor Microsoft Corporation source copyright header
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension

20 of 24 traits shown

Identity

SHA-256 a85b094eabc7c8858613764992694d0b70f2bdfd0dbdcd864c2a4ccdce22c376
Filename pkg:npm/%40cloudflare/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 13 Aug 2026 04:46 UTC
First analyzed 13 Aug 2026 04:45 UTC
Last analyzed 26 Aug 2026 06:26 UTC
Last updated 26 Aug 2026 06:28 UTC

Labeling

Label unknown