Open-source atomic malware analysis

Analyze another

on-zero

NPM
Verdict: SUSPICIOUS
SHA256: ae255a7ffdaf426f701dfcbcc43ddb232bc6a88f4fa9dd36d5b1c81baeb58a98 · 54%
“A typed layer over @rocicorp/zero with queries, mutations, and permissions”
AI TLS bypass and shell execution
Mal-ecule
K(Mc)O(Er)H₆(Cm₈Cr₂Db₆F₅OsPo₅)Md₄(BkInPa₄)
Size 809.2 KB download
First seen 2 days ago
Analyzed 2 days ago
Package pkg:npm/on-zero
Ecosystem javascript
Source registry.npmjs.org

Loading file contents…

Loading traits…

Identity

SHA-256 ae255a7ffdaf426f701dfcbcc43ddb232bc6a88f4fa9dd36d5b1c81baeb58a98
Canonical SHA-256 00635d6c17d9ea6962585a67d9f51a394d3646050ecb408f8c2921d63743492a
Filename on-zero-0.7.0.tgz
Package on-zero
PURL pkg:npm/on-zero

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/on-zero/-/on-zero-0.7.0.tgz

Timeline

First seen 19 Jul 2026 16:28 UTC
First analyzed 19 Jul 2026 17:25 UTC
Last analyzed 19 Jul 2026 17:25 UTC
Last updated 19 Jul 2026 17:25 UTC

Labeling

Label unknown
Label source forager
Traits version 32522