Open-source atomic malware analysis

Analyze another

@rolldown/pluginutils 1.0.0-rc.10

UNKNOWN
Verdict: BENIGN
SHA256: c3db6d1153954b77c17175e9dee334d8e3668a198f3cc71eadf80960826d3982
“A utility library for building flexible, composable filter expressions that can be used in plugin hook filters of Rolldown/Vite/Rollup/Unpl…”
Mal-ecule
H₂(Cm₂Db₂)Md(Pa₅)
Size 6.2 KB download
First seen 15 days ago
Analyzed 2 days ago
Package pkg:npm/@rolldown/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 72% confident.
data/encode URLSearchParams constructor call
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 95% confident.
package/files JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest npm package is configured for public publishing
baseline severity, 95% confident.
file/profile Contains a UI language-label table
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 c3db6d1153954b77c17175e9dee334d8e3668a198f3cc71eadf80960826d3982
Canonical SHA-256 0088b02dca63c47b273a140d0a3944bdc6dc2eb765fff0ca98e3c3a2786b3a5a
Filename [email protected]
Package @rolldown/pluginutils
Version 1.0.0-rc.10
PURL pkg:npm/@rolldown/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.10.tgz

Timeline

First seen 11 Aug 2026 14:08 UTC
First analyzed 11 Aug 2026 14:10 UTC
Last analyzed 24 Aug 2026 02:06 UTC
Last updated 24 Aug 2026 02:06 UTC

Labeling

Label unknown
Traits version 73866