Open-source atomic malware analysis

Analyze another

actions/checkout 93cb6efe18208431cddfb8368fd83d5badbf9bfd

UNKNOWN
Verdict: BENIGN
SHA256: bed2bed509f87966c1c2f0c1361ad6b46e0a3f3b88ac943cf6a0c7fe3419d3f1
“Action for checking out a repo”
Mal-ecule
K(Li)O(Dy)H₇(Cm₃₉CrDb₂₁F₁₅Os₆Po₁₅Ti)Md₄(Bk₂InLiPa₆)
Size 419.0 KB download
First seen 15 days ago
Analyzed 1 day ago
Package pkg:github/actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Well-known

notable severity, 98% confident.
lib/development npm semver legacy single-file module

Micro-behaviors

notable severity, 96% confident.
communications/http Access-token field reference
notable severity, 95% confident.
communications/http/download References a release download URL path
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 95% confident.
fs/directory Shell changes working directory
notable severity, 100% confident.
fs/file/write Node calls imported writeFileSync
notable severity, 92% confident.
fs/path Node builds a hidden home-directory path
notable severity, 94% confident.
fs/path/sensitive JavaScript builds the user SSH directory path
notable severity, 95% confident.
fs/write/file Node fs writes to a file synchronously
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars
notable severity, 94% confident.
process/create/shell GitHub Actions creates and pushes a tag
notable severity, 94% confident.
process/create/vcs JavaScript Git repository query command

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 95% confident.
package/testing Jest test framework

20 of 73 traits shown

Identity

SHA-256 bed2bed509f87966c1c2f0c1361ad6b46e0a3f3b88ac943cf6a0c7fe3419d3f1
Canonical SHA-256 053fe216eb168c36ae2ba701edcead9a941ef8c85f514dcb557bd6879d7fb732
Filename 93cb6efe18208431cddfb8368fd83d5badbf9bfd
Package actions/checkout
Version 93cb6efe18208431cddfb8368fd83d5badbf9bfd
PURL pkg:github/actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd

Origin

Source upload
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/checkout/tar.gz/93cb6efe18208431cddfb8368fd83d5badbf9bfd

Timeline

First seen 11 Aug 2026 19:00 UTC
First analyzed 11 Aug 2026 19:10 UTC
Last analyzed 25 Aug 2026 19:13 UTC
Last updated 25 Aug 2026 19:14 UTC

Labeling

Label unknown
Label source upload
Traits version 72034