Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm₂)Md₂(Pa₄)
Referenced by 1 sample
Micro-behaviors
notable severity, 82% confident.
communications/http/request
Passes fetch as a call argument
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 85% confident.
package
suspect major version (90+) for npm package
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 95% confident.
package/files
Filename is package.json
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | b89a2af49764761f9f256071bf2a77d137747c043da92c0748499a03b7f66e30 |
|---|---|
| Canonical SHA-256 | 0b7beb311dad5f89cda5b85b86f1b2919d2e452dd72fa6647e318a6a2b56c449 |
| Filename | engine.runtime.commands-1100.1.20.tgz |
| Package | engine.runtime.commands |
| Version | 1100.1.20 |
| PURL | pkg:npm/@pnpm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@pnpm/engine.runtime.commands/-/engine.runtime.commands-1100.1.20.tgz |
Timeline
| First seen | 15 Aug 2026 01:58 UTC |
|---|---|
| First analyzed | 15 Aug 2026 02:01 UTC |
| Last analyzed | 15 Aug 2026 02:04 UTC |
| Last updated | 15 Aug 2026 02:03 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 66877 |
Not seeing what you expected? Let us know