Local reference
Suspicious dependency
Inferred
Mal-ecule
H₆(Cm₅CrDb₂FOsPo)Md₂(Pa₃)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http
Contains multiple hardcoded User-Agent strings
notable severity, 82% confident.
communications/http/request
Passes fetch as a call argument
notable severity, 80% confident.
communications/http/url
Reads hostname from URL variable
notable severity, 90% confident.
data/decode
Decodes Base64 data with JavaScript atob()
notable severity, 80% confident.
data/source
JavaScript bitwise arithmetic and shift chain
notable severity, 80% confident.
fs/read
Reads an entire text file into memory
notable severity, 90% confident.
os/sysinfo/platform
Reads browser identity or display input
notable severity, 85% confident.
process/create
Node child_process spawns external process
baseline severity, 70% confident.
crypto/certificate
References PEM certificate header
Metadata
notable severity, 100% confident.
file/format
JavaScript source map
notable severity, 90% confident.
package/manifest
Repository uses GitHub shorthand
baseline severity, 95% confident.
file/profile
Contains a UI language-label table
baseline severity, 90% confident.
package
npm manifest omits devDependencies field
20 of 21 traits shown
Identity
| SHA-256 | b3c45e92d7cfc30ec76c003ea741351c5b1eb9b4db1c45ff991dbcff58f2c919 |
|---|---|
| Canonical SHA-256 | 06f6660b1d51293a9ad5e9aad26f5b9dafd66cfb7a68a27d0c283871e3cb81f6 |
| Filename | net-0.2.3.tgz |
| Package | @moq/net |
| Version | 0.2.3 |
| PURL | pkg:npm/%40moq/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@moq/net/-/net-0.2.3.tgz |
Timeline
| First seen | 5 Aug 2026 14:05 UTC |
|---|---|
| First analyzed | 5 Aug 2026 14:07 UTC |
| Last analyzed | 5 Aug 2026 14:07 UTC |
| Last updated | 5 Aug 2026 14:05 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 1e491 |
Not seeing what you expected? Let us know