“floating-menu extension for tiptap”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm)Md₂(Pa₂)
Referenced by 6 samples
- benign github.com-seongminhwan-mailman-v1.0.3-0.20260722180832-a027c761f0d4.zip fetched
- hostile github.com-unicomai-wanwu-workflow-v0.0.0-20260724073238-b9e551fc42c5.zip fetched
- benign github.com-aristorinjuang-lesstruct-v0.7.0.zip fetched
- benign notomate-notomate-v0.20.6.tar.gz fetched
- benign github.com-skkuding-codedang-v0.0.0-20260723050733-41513c208630.zip fetched
- benign github.com-usekaneo-kaneo-v2.9.9-0.20260721210114-90d8b6952e89+incompatible.zip fetched
Objectives
baseline severity, 90% confident.
anti-static/obfuscation/code-metrics
Non-shell filename marker
component severity, 90% confident.
credential-access/phishing
References the CSS position property
component severity, 96% confident.
supply-chain/install-hook/scripts
package files list only src
Micro-behaviors
notable severity, 92% confident.
communications/http/url
Remote extension/shortcut listing URL path
baseline severity, 84% confident.
data/control-flow
Invokes function with .call()
component severity, 95% confident.
communications/url
Encoded URL benign documentation or test context
component severity, 100% confident.
process/create/shell
Inline-code bytes or property documentation
component severity, 100% confident.
ui/window/manage
DOM or CSS size property (width)
Metadata
notable severity, 100% confident.
file
JavaScript source map
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
notable severity, 85% confident.
package/quality
Package has multiple entry points
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 80% confident.
import
Requires a scoped npm package
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 100% confident.
package
Package version uses numeric SemVer format
baseline severity, 75% confident.
package/keywords
Package declares keywords
component severity, 100% confident.
file/extension
JavaScript source filename extension
20 of 27 traits shown
Identity
| SHA-256 | c882690ed591349be68c1819b64a2151249ac42c0a9512bc15d6f621831c989b |
|---|---|
| Filename | [email protected] |
| Package | @tiptap/extension-floating-menu |
| Version | 3.29.1 |
| PURL | pkg:npm/@tiptap/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | npm |
| URL | https://registry.npmjs.org/@tiptap/extension-floating-menu/-/extension-floating-menu-3.29.1.tgz |
Timeline
| First seen | 27 Jul 2026 05:39 UTC |
|---|---|
| First analyzed | 27 Jul 2026 05:40 UTC |
| Last analyzed | 27 Jul 2026 17:57 UTC |
| Last updated | 27 Jul 2026 17:57 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 50048 |
Not seeing what you expected? Let us know