Open-source atomic malware analysis

Analyze another

@cloud-copilot-log-0.1.47.tgz

TAR.GZ
Verdict: BENIGN
SHA256: c9b5f5bfc2b0bb1c054f6c2e91da41677c332b1c261fcb99f3044523a15176cb
Mal-ecule
O(S)H(Po)Md(Pa₇)
Size 9.2 KB download
First seen 25 days ago
Analyzed 24 days ago
Ecosystem javascript
Source npmjs.org

Well-known

component severity, 100% confident.
malware/stealer Regex component marker

Objectives

notable severity, 84% confident.
supply-chain/metadata-anomaly/manifest Package name says AI coder
component severity, 100% confident.
anti-static/obfuscation/code-metrics Comment-heavy source context
component severity, 100% confident.
impact/destroy package defines test script

Micro-behaviors

notable severity, 70% confident.
process/create/shell bash shell keyword (beyond shebang)
baseline severity, 90% confident.
data/source Prototype guard checks constructor
baseline severity, 90% confident.
dylib/library Async I/O library (libevent, libev, etc.)
baseline severity, 80% confident.
os/env Node process.env access

Metadata

notable severity, 90% confident.
package Package has TypeScript support
notable severity, 90% confident.
package/fields Package has TypeScript types entry
baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
import imports vitest from ^4.0.18
baseline severity, 95% confident.
import/npm::cloud-copilot imports @cloud-copilot/prettier-config from ^0.1.0
baseline severity, 95% confident.
import/npm::semantic-release imports @semantic-release/changelog from ^6.0.3
baseline severity, 95% confident.
import/npm::types imports @types/node from ^22.5.0
baseline severity, 95% confident.
import/npm::vitest imports @vitest/coverage-v8 from ^4.0.18
baseline severity, 99% confident.
lang TypeScript declaration file (.d.ts/.d.cts/.d.mts)
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 90% confident.
package/testing/harness WebKit debug() test helper

fs

notable severity, 80% confident.
file Script 'clean' performs file deletion

20 of 32 traits shown

Identity

SHA-256 c9b5f5bfc2b0bb1c054f6c2e91da41677c332b1c261fcb99f3044523a15176cb
Canonical SHA-256 0fd60238fbf7b1eaeaae2ff88f3f5b3bb02a33273f1e0d1e6caa838e3e68fbfc
Filename @cloud-copilot-log-0.1.47.tgz
Package @cloud-copilot
Version 0.1.47

Origin

Source harvest
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org

Timeline

First seen 23 May 2026 08:53 UTC
First analyzed 24 May 2026 00:11 UTC
Last analyzed 24 May 2026 00:11 UTC
Last updated 24 May 2026 00:11 UTC

Labeling

Label unknown
Label source harvest
Traits version 9ea7c