“The set of Unicode symbols that can serve as a base for emoji modifiers, i.e. those with the `Emoji_Modifier_Base` property set to `Yes`.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
O(S)H₂(CmPo)Md(Pa₂)
Referenced by 10 samples
- benign renovate-42.80.2-r0.apk fetched
- suspicious github.com-mckinsey-agents-at-scale-ark-v0.0.0-20260818081042-20a439c530ba.zip fetched
- benign microsoft-garnet-v2.1.4-source.tar.gz fetched
- suspicious renovatebot-github-action-v46.2.3.tar.gz fetched
- hostile github.com-semaphoreio-semaphore-v0.0.0-20260703133820-4ac320cff614.zip fetched
- benign github.com-behavior-tree-lab-behavior-tree-v0.0.6-0.20260611082322-8d7467647bdb.zip fetched
- benign renovate-43.137.0-r0.apk fetched
- hostile centralnicreseller_apiconnector-5.0.8.tar.gz fetched
- benign github.com-maxritter-pilot-shell-v9.16.1+incompatible.zip fetched
- github.com-Cloud-Copilot-iam-collect-v0.1.189.zip fetched
Objectives
notable severity, 85% confident.
supply-chain/impersonation/package
npm package has 'download' script
Micro-behaviors
notable severity, 85% confident.
communications/http/download
npm script invokes curl URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest declares no runtime dependencies
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 70% confident.
file
JavaScript file under 5KB
component severity, 100% confident.
file/extension
JavaScript source filename extension
Identity
| SHA-256 | b753860ffa1f54f2b415de82e23d2ce79a89bfdc5fff1a4361a32cc8215ff4e5 |
|---|---|
| Canonical SHA-256 | 242f5577f26c3fff547508911718348993d5ef04ff72a44c71115ce002521301 |
| Filename | unicode-emoji-modifier-base-1.0.0.tgz |
| Package | unicode-emoji-modifier-base |
| Version | 1.0.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/unicode-emoji-modifier-base/-/unicode-emoji-modifier-base-1.0.0.tgz |
Timeline
| First seen | 22 Jul 2026 02:49 UTC |
|---|---|
| First analyzed | 22 Jul 2026 02:54 UTC |
| Last analyzed | 23 Aug 2026 21:35 UTC |
| Last updated | 23 Aug 2026 21:44 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
Not seeing what you expected? Let us know