Open-source atomic malware analysis

Analyze another

arkormx 2.12.8

UNKNOWN
Verdict: BENIGN
SHA256: afb0a98054f49388777b7e0aa092221ab09db3c5f290d7824c29b049213e03db
Mal-ecule
H₆(CmCrDb₅F₃OsPo₂)Md₂(Pa₅)
Size 437.7 KB download
First seen 19 days ago
Analyzed 19 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Micro-behaviors

notable severity, 80% confident.
communications/http/url Builds URL query parameters
notable severity, 86% confident.
data/control-flow Invokes zero-argument function at module scope
notable severity, 90% confident.
data/db MongoDB update write call
notable severity, 88% confident.
data/source/dynamic Node require call with computed module name
notable severity, 90% confident.
fs/directory Creates a directory tree synchronously
notable severity, 90% confident.
fs/file Calls readFileSync
notable severity, 90% confident.
os/env Reads database connection URL from process.env
notable severity, 90% confident.
process/create/shell Calls spawnSync() to run a child process

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 95% confident.
file/profile Contains a UI language-label table
component severity, 100% confident.
package package.json declares a test script

Identity

SHA-256 afb0a98054f49388777b7e0aa092221ab09db3c5f290d7824c29b049213e03db
Canonical SHA-256 06495eb1c8cfd4a4ebd756726d7d33428f79c35f661e8c3b8a9112ed3a39fac6
Filename arkormx-2.12.8.tgz
Package arkormx
Version 2.12.8
PURL pkg:npm/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/arkormx/-/arkormx-2.12.8.tgz

Timeline

First seen 5 Aug 2026 18:17 UTC
First analyzed 5 Aug 2026 18:20 UTC
Last analyzed 5 Aug 2026 18:20 UTC
Last updated 5 Aug 2026 18:17 UTC

Labeling

Label unknown
Label source upload
Traits version b5ca8