Local reference
Suspicious dependency
Inferred
Mal-ecule
O(S)H(Db₂)Md
Objectives
notable severity, 85% confident.
supply-chain/metadata-anomaly/dependency
Lockfile dependency has install script
Micro-behaviors
component severity, 84% confident.
data/text/llm
Regex component marker
Metadata
notable severity, 90% confident.
encoded-payload
Encoded payload detected: xor
Identity
| SHA-256 | c46a4b0e8698bc95e0d72966d8d3241da3d837bc2c0f5005ed2f482e52bbc11d |
|---|---|
| Filename | package-lock.json |
Origin
| Source | harvest |
|---|---|
| Ecosystem | repos |
Timeline
| First seen | 4 May 2026 22:36 UTC |
|---|---|
| Last analyzed | 5 May 2026 03:04 UTC |
| Last updated | 5 May 2026 03:04 UTC |
Labeling
| Label | good |
|---|---|
| Label source | harvest |
| Traits version | 27ac5 |
Not seeing what you expected? Let us know