Open-source atomic malware analysis

Analyze another

ob1 0.84.4

NPM
Verdict: BENIGN
SHA256: b10857a6dfc73dbaa94dabb1426d6759ffb2660a5e90b5afe301ff9ca1aa822a
“A small library for working with 0- and 1-based offsets in a type-checked way.”
Mal-ecule
H₂(FPo)Md(Pa)
Size 2.3 KB download
First seen 3 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Objectives

component severity, 100% confident.
anti-analysis/timing Function returning simple subtraction
component severity, 90% confident.
anti-static/obfuscation/code-metrics Average identifier length >= 22 chars
component severity, 98% confident.
anti-static/obfuscation/string Test script basename
component severity, 90% confident.
supply-chain/impersonation/package Republished package claims upstream repository

Micro-behaviors

notable severity, 85% confident.
fs/file Package script deletes files
notable severity, 90% confident.
process/create/shell npm, Yarn, or pnpm run build
component severity, 95% confident.
communications/url Encoded URL benign documentation or test context

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 90% confident.
build JavaScript config exports default object
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
library Exports a JavaScript module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 75% confident.
package/keywords Package declares keywords
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension Common web or JSON file extension

20 of 21 traits shown

Identity

SHA-256 b10857a6dfc73dbaa94dabb1426d6759ffb2660a5e90b5afe301ff9ca1aa822a
Filename [email protected]
Package ob1
Version 0.84.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/ob1/-/ob1-0.84.4.tgz

Timeline

First seen 12 Aug 2026 14:55 UTC
First analyzed 12 Aug 2026 14:54 UTC
Last analyzed 13 Aug 2026 08:47 UTC
Last updated 13 Aug 2026 08:47 UTC

Labeling

Label unknown
Traits version 73866