Open-source atomic malware analysis

Analyze another

actions/github-script v7.0.1

UNKNOWN
Verdict: BENIGN
“Write workflows scripting the GitHub API in JavaScript”
Mal-ecule
H₇(Cm₂₈Cr₃Db₁₇F₃Os₃Po₁₁Ti)Md₄(Bk₂InLiPa₆)
Size 417.8 KB download
First seen 16 days ago
Analyzed 2 days ago
Ecosystem github

Referenced by 1 sample

Micro-behaviors

notable severity, 96% confident.
communications/http Access-token field reference
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 90% confident.
communications/socket Node net.connect call with options object
notable severity, 90% confident.
data Creates Node.js Buffer from UTF-8 text
notable severity, 90% confident.
data/compress Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 90% confident.
data/decode Decodes Base64 data with JavaScript atob()
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/source/property Reads constructor properties repeatedly
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars
notable severity, 92% confident.
process/create Requires worker_threads module
notable severity, 95% confident.
process/interpreter JavaScript AsyncFunction compiles code

Metadata

notable severity, 100% confident.
build GitHub Actions composite action definition
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 96% confident.
package/testing/harness Calls a test-case function

20 of 61 traits shown

Identity

SHA-256 c610079d3f1d7b03b58754ac8d36e8b493ebf904d247069045cdbc4a73ec500e
Canonical SHA-256 354e9f45ef54d7b71b3bb2d36aefb566c49cfff32685cf483d82393d6bebc05e
Filename v7.0.1
Package actions/github-script
Version v7.0.1
PURL pkg:github/actions/[email protected]

Origin

Source upload
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/github-script/tar.gz/v7.0.1

Timeline

First seen 12 Aug 2026 00:13 UTC
First analyzed 12 Aug 2026 00:27 UTC
Last analyzed 25 Aug 2026 03:12 UTC
Last updated 25 Aug 2026 03:13 UTC

Labeling

Label unknown
Label source upload
Traits version b8c1c