Open-source atomic malware analysis

Analyze another

pkg:npm/%40vitest/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: ae5ba9ffc40599d81ef4311533d5f87318abfabe98369901f099a5bf368fb414
Mal-ecule
H₃(Cm₂Db₂Po)Md(Pa₅)
Size 97.8 KB download
First seen 5 days ago
Analyzed 5 days ago
Ecosystem go

Referenced by 1 sample

Objectives

component severity, 95% confident.
anti-static/obfuscation/encoding Many subtraction operators present
component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/source/function Telemetry-style call receives data object
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 98% confident.
lang/encoded ESM wrapper helper
component severity, 95% confident.
library esbuild __defProp helper
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

20 of 21 traits shown

Identity

SHA-256 ae5ba9ffc40599d81ef4311533d5f87318abfabe98369901f099a5bf368fb414
Filename pkg:npm/%40vitest/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 21 Aug 2026 03:46 UTC
First analyzed 21 Aug 2026 03:44 UTC
Last analyzed 21 Aug 2026 03:44 UTC
Last updated 21 Aug 2026 03:46 UTC

Labeling

Label unknown