Open-source atomic malware analysis

Analyze another

@vue/tsconfig 0.9.1

NPM
Verdict: BENIGN
“A base TSConfig for working with Vue.js”
Mal-ecule
H(Os)Md₂(BkPa₂)
Size 5.6 KB download
First seen 18 days ago
Analyzed 17 days ago
Ecosystem javascript

Referenced by 4 samples

Objectives

component severity, 82% confident.
execution/automation Target-version compound marker
component severity, 85% confident.
supply-chain/impersonation/manifest Trivial test script (ls/true/echo/pwd)
component severity, 90% confident.
supply-chain/impersonation/package Republished package claims upstream repository

Micro-behaviors

notable severity, 90% confident.
os/package-manager Build runs npm dependency installation

Metadata

notable severity, 90% confident.
build GitHub Actions OIDC write permission
notable severity, 90% confident.
package/manifest npm package is configured for public publishing
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits devDependencies field
baseline severity, 75% confident.
package/keywords Package declares keywords
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension Text, document, or config extension
component severity, 95% confident.
package/testing/presence Default npm-init placeholder test script

Identity

SHA-256 c6e3aaf08254a41f1880a734aae94396c7c16a4b99fa031997a69c7d5569f513
Filename [email protected]
Package @vue/tsconfig
Version 0.9.1
PURL pkg:npm/@vue/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@vue/tsconfig/-/tsconfig-0.9.1.tgz

Timeline

First seen 10 Aug 2026 13:22 UTC
First analyzed 10 Aug 2026 13:24 UTC
Last analyzed 11 Aug 2026 18:38 UTC
Last updated 11 Aug 2026 18:38 UTC

Labeling

Label unknown
Traits version 73866