Open-source atomic malware analysis

Analyze another

@lynx-js/react-webpack-plugin 0.10.2

UNKNOWN
Verdict: BENIGN
SHA256: b427408872dfb690c331a9d755be518cc8a97d88511d69c4adad356577f53cba
Mal-ecule
H₃(CmDb₂F)Md(Pa₄)
Size 21.5 KB download
First seen 22 days ago
Analyzed 22 days ago
Package pkg:npm/@lynx-js/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Micro-behaviors

notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 94% confident.
data/encode JavaScript comment contains Base64-like content
notable severity, 88% confident.
data/source/dynamic Node require call with computed module name
notable severity, 90% confident.
fs/file Calls readFileSync

Metadata

notable severity, 90% confident.
package/manifest Named as a bundler/build-tool plugin
notable severity, 85% confident.
package/quality Package has multiple entry points
baseline severity, 92% confident.
build JavaScript build config identity
baseline severity, 95% confident.
library Webpack JSONP chunk-loading global
component severity, 100% confident.
package package.json declares a test script

Identity

SHA-256 b427408872dfb690c331a9d755be518cc8a97d88511d69c4adad356577f53cba
Canonical SHA-256 1080ee5967a441dda68dbc0ccbe79bde098463ad3762769d571ace7ef3891f5b
Filename react-webpack-plugin-0.10.2.tgz
Package @lynx-js/react-webpack-plugin
Version 0.10.2
PURL pkg:npm/@lynx-js/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@lynx-js/react-webpack-plugin/-/react-webpack-plugin-0.10.2.tgz

Timeline

First seen 6 Aug 2026 07:56 UTC
First analyzed 6 Aug 2026 07:58 UTC
Last analyzed 6 Aug 2026 07:59 UTC
Last updated 6 Aug 2026 07:56 UTC

Labeling

Label unknown
Label source upload
Traits version b5ca8