Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm)Md₂(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
JavaScript distribution output path
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits devDependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 95% confident.
package/files
Filename is package.json
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | afd66a72b2eb0140dd45e74fc851262840ce87d7135ee4c77be8ecb42aa924ea |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | aur.archlinux.org |
| Ecosystem | arch |
Timeline
| First seen | 15 Aug 2026 21:46 UTC |
|---|---|
| First analyzed | 15 Aug 2026 21:46 UTC |
| Last analyzed | 15 Aug 2026 21:55 UTC |
| Last updated | 15 Aug 2026 21:53 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know