Open-source atomic malware analysis

Analyze another

csstype 2.6.11

UNKNOWN
Verdict: BENIGN
SHA256: b7c27667c1f6d4688c893a6637c0e0ab526d833d2da509b9e2046f7dcd8e2605
“Strict TypeScript and Flow types for style based on MDN data”
Mal-ecule
H(Po)Md₂(Pa₃)
Size 270.9 KB download
First seen 13 days ago
Analyzed 6 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 95% confident.
communications/url Encoded URL references MDN documentation
component severity, 92% confident.
ui/window Browser selector targets editable page content
component severity, 78% confident.
ui/window/manage References an iframe HTML element

Metadata

notable severity, 97% confident.
file Many Base64-like comment spans in JavaScript
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepublish' hook that runs during install

Identity

SHA-256 b7c27667c1f6d4688c893a6637c0e0ab526d833d2da509b9e2046f7dcd8e2605
Canonical SHA-256 522796fdcf08b59500619868b1dfc18b2c193393a866ccb4c07dc07d031ed2b1
Filename [email protected]
Package csstype
Version 2.6.11
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/csstype/-/csstype-2.6.11.tgz

Timeline

First seen 15 Aug 2026 14:27 UTC
First analyzed 15 Aug 2026 14:26 UTC
Last analyzed 22 Aug 2026 09:01 UTC
Last updated 22 Aug 2026 09:01 UTC

Labeling

Label unknown
Traits version 285c0