Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(DbPo)Md(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
data/decode
Calls JavaScript unescape
notable severity, 80% confident.
process/io
References Node.js stdout stream
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
baseline severity, 80% confident.
data/string
JavaScript split with variable delimiter
component severity, 90% confident.
communications/url
Encoded URL public documentation
Metadata
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
Identity
| SHA-256 | c5643432eece2c6e4e8ddfa7ca65eb491c430c37bce356c63f5d31d335418c30 |
|---|---|
| Filename | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Ecosystem | npm |
Timeline
| First seen | 23 Aug 2026 10:47 UTC |
|---|---|
| First analyzed | 23 Aug 2026 10:47 UTC |
| Last analyzed | 23 Aug 2026 10:56 UTC |
| Last updated | 23 Aug 2026 10:56 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know