Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm)Md₂(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
communications/http/url
Cleartext http:// URL
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
baseline severity, 80% confident.
data/string
JavaScript split with variable delimiter
component severity, 88% confident.
communications/http
Calls a matcher in a conditional expression
component severity, 90% confident.
communications/url
Encoded URL public documentation
Metadata
notable severity, 88% confident.
file
High-byte script text (>=12%)
notable severity, 99% confident.
file/profile
Escaped Unicode script codepoint in source
notable severity, 90% confident.
package/dependencies
npm dependency declared with a Git URL
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 95% confident.
package/files
Filename is package.json
Identity
| SHA-256 | c46cd9903287288ab426d467b4835523e88fc9424768452dc2bae3a753d71d0f |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | open-vsx.org |
| Ecosystem | vscode |
Timeline
| First seen | 19 Aug 2026 00:01 UTC |
|---|---|
| First analyzed | 19 Aug 2026 00:01 UTC |
| Last analyzed | 19 Aug 2026 00:01 UTC |
| Last updated | 19 Aug 2026 00:01 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know