Open-source atomic malware analysis

Analyze another

postcss-custom-properties 12.1.11

UNKNOWN
Verdict: BENIGN
SHA256: a8b2f813b0a30eb55c676eb8a723aff55cdc713feaecf44aaafc62ba24d6ecaa
“Use Custom Properties Queries in CSS”
Mal-ecule
H₅(Cm₂Db₃F₂OsPo)Md₂(Pa₅)
Size 11.0 KB download
First seen 14 days ago
Analyzed 10 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/format Markdown references a remote image
notable severity, 88% confident.
data/source/dynamic Node require call with computed module name
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 80% confident.
fs/file Calls a file-reading API
notable severity, 90% confident.
fs/write/file JavaScript file write operation
notable severity, 90% confident.
os/module CommonJS require in catch-handling region
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 70% confident.
import Imports the Node.js fs module
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 a8b2f813b0a30eb55c676eb8a723aff55cdc713feaecf44aaafc62ba24d6ecaa
Canonical SHA-256 2230f8e9dd07998784820ea14f5a3c5371b15acaaf2f55c6869dd69b9a392730
Filename [email protected]
Package postcss-custom-properties
Version 12.1.11
PURL pkg:npm/[email protected]

Origin

Source x
Feed opensourcemalware.com
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/postcss-custom-properties/-/postcss-custom-properties-12.1.11.tgz

Timeline

First seen 11 Aug 2026 12:33 UTC
First analyzed 11 Aug 2026 12:34 UTC
Last analyzed 15 Aug 2026 21:54 UTC
Last updated 15 Aug 2026 21:53 UTC

Labeling

Label unknown
Traits version 73866