“Node.js `http.STATUS_CODES` ponyfill”
Local reference
Suspicious dependency
Inferred
Mal-ecule
O(S)H₂(CmPo)Md(Pa₂)
Referenced by 10 samples
- benign github.com-kripod-vscode-icons-v7.2.0+incompatible.zip fetched
- benign @akinon-next-2.0.72.tgz fetched
- hostile libEGL.7z fetched
- benign github.com-readmeio-api-explorer-v0.8.1.zip fetched
- benign gitlab.com-redhat-hummingbird-tools-v0.0.0-20260806141541-6c861fcd6a16.zip fetched
- benign enzyme-3.7.0.tgz fetched
- benign github.com-HarshCasper-Nest-v6.5.3+incompatible.zip fetched
- hostile kxnotes-image-paste-optimizer-0.1.5.zip fetched
- benign github.com-looker-open-source-components-v0.7.1.zip fetched
- hostile github.com-netflix-skunkworks-stethoscope-app-v1.2.0.zip fetched
Objectives
notable severity, 90% confident.
supply-chain/impersonation
Declares [email protected] as author email
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
JavaScript source filename extension
Identity
| SHA-256 | c1bb10f5e49b47b8a7609f900e71812bb3c641bac852ce4b72c8442156f6a16b |
|---|---|
| Canonical SHA-256 | 3aa33c18eacaae9952ec62a46a5c752022d4983e987cae981a3363541218e999 |
| Filename | [email protected] |
| Package | node-status-codes |
| Version | 1.0.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | wordpress.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/node-status-codes/-/node-status-codes-1.0.0.tgz |
Timeline
| First seen | 11 Aug 2026 16:57 UTC |
|---|---|
| First analyzed | 11 Aug 2026 16:57 UTC |
| Last analyzed | 21 Aug 2026 07:48 UTC |
| Last updated | 21 Aug 2026 07:48 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know