Open-source atomic malware analysis

Analyze another

@tanstack/react-router 1.169.2

UNKNOWN
Verdict: BENIGN
SHA256: b5d145d2e6d3c8139402880043ceeeb2a09b07dbfdb398360ad9ca995e64a2ae
“Modern and scalable routing for React applications”
Mal-ecule
K(Li)H₆(Cm₁₁Db₇FOsPo₄U₃)Md₃(LiPa₇)
Size 489.5 KB download
First seen 15 days ago
Analyzed 2 days ago
Package pkg:npm/@tanstack/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by osv+4 more

Referenced by 3 samples

Well-known

notable severity, 85% confident.
lib/ui ReactDOM object reference

Micro-behaviors

notable severity, 90% confident.
communications/http Hard-coded remote configuration endpoint
notable severity, 96% confident.
communications/http/url Encoded raw.githubusercontent.com URL
notable severity, 90% confident.
communications/http/user-agent-routing Node handler gets User-Agent header
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 90% confident.
data/db Calls localStorage or sessionStorage getItem
notable severity, 90% confident.
data/decode JavaScript hex escape decoder
notable severity, 90% confident.
data/format Markdown references a remote image
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 90% confident.
fs/path/application VS Code project settings path
notable severity, 90% confident.
os/module ESM side-effect-only package import
notable severity, 90% confident.
process/create/load CommonJS side-effect-only require
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
notable severity, 95% confident.
ui/window/manage HTML contains an inline event handler

Metadata

notable severity, 90% confident.
file High encoded-string ratio in JavaScript
notable severity, 92% confident.
file/profile Generated documentation web page
notable severity, 90% confident.
library Uses React or Vue component patterns
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 99% confident.
package/quality ESLint plugin rules source path

20 of 44 traits shown

Identity

SHA-256 b5d145d2e6d3c8139402880043ceeeb2a09b07dbfdb398360ad9ca995e64a2ae
Canonical SHA-256 01b574ccbce69d1ec9ed106d06843d283cbdc22724e0a35f72b8a4504b43df65
Filename [email protected]
Package @tanstack/react-router
Version 1.169.2
PURL pkg:npm/@tanstack/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@tanstack/react-router/-/react-router-1.169.2.tgz

Timeline

First seen 11 Aug 2026 22:17 UTC
First analyzed 11 Aug 2026 22:19 UTC
Last analyzed 24 Aug 2026 17:38 UTC
Last updated 24 Aug 2026 17:39 UTC

Labeling

Label unknown
Traits version 73866