Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li₂)H₃(Cm₂Db₃F₂)Md₂(BkPa)
Referenced by 10 samples
- benign github.com-tanemahuta-aws-lambda-server-v1.5.4.zip fetched
- benign gitlab.heliumnet.nl-toolbox-git-lfs-s3-caching-adapter-v0.0.0-20260823094024-f9b425cfb70d.zip fetched
- hostile github.com-randomcodespace-kb-v0.12.0.zip fetched
- benign github.com-compgenlab-cgkit-v0.6.3-0.20260811215949-0671c017d4cd.zip fetched
- benign github.com-redhatinsights-insights-operator-gathering-conditions-service-v0.0.0-20260801221207-89d7d63fa597.zip fetched
- benign github.com-compgenlab-hts-v0.10.1.zip fetched
- benign github.com-tangerg-lynx-models-v0.0.0-20260802013709-85f3318ba0e0.zip fetched
- benign github.com-sricola-offshoot-v0.1.1.zip fetched
- github.com-icha-senpai-note-third_party-forks-v0.0.0-20260814232715-af2f767d89c4.zip fetched
- benign github.com-stacklok-dockyard-v0.0.0-20260806174412-86d47c065a6f.zip fetched
Well-known
notable severity, 99% confident.
lib/cloud
AWS SDK for Go v2 repository reference
Objectives
component severity, 96% confident.
credential-access/theft
Access-token field name in structured data
Micro-behaviors
notable severity, 90% confident.
communications/http/url
Cleartext http:// URL
notable severity, 90% confident.
communications/url
Parses a URL with net/url
notable severity, 90% confident.
data
Copies data with Go io.Copy
notable severity, 90% confident.
data/serialize
Go JSON decoder construction
notable severity, 80% confident.
data/source/dynamic
Repeated Go reflection API usage
notable severity, 90% confident.
fs/directory
Creates a directory tree with Go os.MkdirAll
notable severity, 88% confident.
fs/file
Go reads a delimited line
Metadata
notable severity, 97% confident.
build
Go generated-code header comment
notable severity, 99% confident.
package
Go module source archive layout
baseline severity, 80% confident.
file/profile
English function-word token "have"
baseline severity, 80% confident.
package/testing/harness
Go test function name
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 85% confident.
lang
Generated source warning text
Identity
| SHA-256 | c52f9a74bbcfa1aac93009b1aedea95fc9818c3c849580a0435e38b1ce714c7f |
|---|---|
| Canonical SHA-256 | 0010ba507d0cc33c68283c9eb21993344e9297ac77815c80156e2261c889e74c |
| Filename | [email protected] |
| Package | github.com/aws/aws-sdk-go-v2/service/sso |
| Version | v1.33.2 |
| PURL | pkg:golang/github.com/aws/aws-sdk-go-v2/service/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/sso/@v/v1.33.2.zip |
Timeline
| First seen | 3 Aug 2026 08:45 UTC |
|---|---|
| First analyzed | 3 Aug 2026 08:47 UTC |
| Last analyzed | 24 Aug 2026 07:15 UTC |
| Last updated | 24 Aug 2026 07:16 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b8c1c |
Not seeing what you expected? Let us know