Open-source atomic malware analysis

Analyze another

pug-code-gen 3.0.2

UNKNOWN
Verdict: BENIGN
SHA256: bd1df32c508407173c14ae03070dc91afacb08bf2e4317a3bee692666f7a55cf
“Default code-generator for pug. It generates HTML via a JavaScript template function.”
Mal-ecule
Md(Pa₃)
Size 7.9 KB download
First seen 13 days ago
Analyzed 5 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines

Identity

SHA-256 bd1df32c508407173c14ae03070dc91afacb08bf2e4317a3bee692666f7a55cf
Canonical SHA-256 b3fb0c4545bd7d404306b52f1751c942c5928f46133631ef414128eac504c2b0
Filename [email protected]
Package pug-code-gen
Version 3.0.2
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/pug-code-gen/-/pug-code-gen-3.0.2.tgz

Timeline

First seen 15 Aug 2026 13:02 UTC
First analyzed 15 Aug 2026 13:04 UTC
Last analyzed 23 Aug 2026 06:18 UTC
Last updated 23 Aug 2026 06:19 UTC

Labeling

Label unknown
Traits version 285c0