Open-source atomic malware analysis

Analyze another

markdown-it-anchor 5.2.7

UNKNOWN
Verdict: BENIGN
SHA256: b38ff3158411ba2c59a5956d4d752c5488fe2a9f19fa891d8101573ea3e33347
“Header anchors for markdown-it.”
Mal-ecule
H₂(DbPo)Md(Pa₃)
Size 8.4 KB download
First seen 11 days ago
Analyzed 6 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 70% confident.
data/encode URL-encodes data via encodeURIComponent
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 65% confident.
communications/http Token member property (weak auth signal)

Metadata

notable severity, 95% confident.
package/manifest Package declares an unpkg CDN entry
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 90% confident.
file Source file has low overall entropy
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 95% confident.
package/dependencies npm manifest has empty dependencies object
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 100% confident.
lang CommonJS require symbol

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepublish' hook that runs during install

Identity

SHA-256 b38ff3158411ba2c59a5956d4d752c5488fe2a9f19fa891d8101573ea3e33347
Canonical SHA-256 2fc29f57b27130a449353a933469fe33abeee258873359b336cd1e859d61b6e3
Filename [email protected]
Package markdown-it-anchor
Version 5.2.7
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-5.2.7.tgz

Timeline

First seen 12 Aug 2026 11:38 UTC
First analyzed 12 Aug 2026 11:39 UTC
Last analyzed 17 Aug 2026 01:22 UTC
Last updated 17 Aug 2026 01:23 UTC

Labeling

Label unknown
Traits version 73866