Local reference
Suspicious dependency
Inferred
Mal-ecule
H(F)Md₂(BkPa)
Referenced by 10 samples
- benign v1.22.3.zip fetched
- benign v1.13.0.zip fetched
- benign v0.6.3.zip fetched
- benign github.com-ksysoev-make-it-public-v0.4.4-0.20250609125009-e304e8963d17.zip fetched
- benign github.com-ZacxDev-civitai-manager-v0.1.29.zip fetched
- benign github.com-onflow-flow-cli-flowkit-v1.10.1-0.20240110222753-94c2f48fc84d.zip fetched
- benign v0.7.0.zip fetched
- benign github.com-openfga-openfga-v1.16.2-0.20260602145247-7d89a5660535.zip fetched
- benign v0.68.0.zip fetched
- hostile github.com-yugabyte-yugabyte-db-managed-yba-installer-v0.0.0-20260811211643-7d67cce2ba95.zip fetched
Micro-behaviors
notable severity, 90% confident.
fs/file
Recursive directory deletion
Metadata
notable severity, 95% confident.
build
Action input references workflow secret
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
file/profile
English function-word token "the"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
Identity
| SHA-256 | b029b936a6b10ae3fa158e14f89910da317bd678fc66f51f9c4612098005d367 |
|---|---|
| Canonical SHA-256 | 257e4151e9ccd38617af13e381c4031ffbdd5a4580c9ba1156cf068831f85086 |
| Filename | [email protected] |
| Package | go.uber.org/multierr |
| Version | v1.9.0 |
| PURL | pkg:golang/go.uber.org/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | golang |
| Domain | golang.org |
| URL | https://proxy.golang.org/go.uber.org/multierr/@v/v1.9.0.zip |
Timeline
| First seen | 2 Aug 2026 08:46 UTC |
|---|---|
| First analyzed | 2 Aug 2026 08:48 UTC |
| Last analyzed | 28 Aug 2026 12:49 UTC |
| Last updated | 28 Aug 2026 12:49 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b59b7 |
Not seeing what you expected? Let us know