Open-source atomic malware analysis

Analyze another

next 16.2.6

UNKNOWN
Verdict: BENIGN
SHA256: caeb2bdf78396771d8b0ff12d9343429297c36b9a6251ea002f7397119cdaebe
“The React Framework”
Mal-ecule
K₂(Li₁₄Te)O₄(C₂DySXe)H₁₂(Cm₆₂Cr₁₃Db₄₁DsF₁₅HfMgOs₂₁Po₂₇Ti₂U₁₀)Md₇(BkInLi₃Pa₁₄Pt₂)
Size 32.5 MB download
First seen 100 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 6 samples

Well-known

notable severity, 99% confident.
lib/core Repeated Zod object-schema type references
notable severity, 99% confident.
lib/development Official webpack npm package name
notable severity, 99% confident.
lib/format iconv-lite DBCS decoding-table implementation
notable severity, 98% confident.
lib/ui ReactDOM development bundle
notable severity, 99% confident.
lib/web Next.js installation diagnostics CLI
notable severity, 98% confident.
tool/development/github-actions GitHub CodeQL Action source archive member

Objectives

notable severity, 96% confident.
command-and-control/remote-command/llm Directs agent to run terminal command

Micro-behaviors

notable severity, 96% confident.
communications/http/url Encoded raw.githubusercontent.com URL
notable severity, 97% confident.
communications/url Checks chrome-extension URL scheme
notable severity, 96% confident.
data/compress Creates a Web CompressionStream
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 100% confident.
data/encode Converts buffer to hex string
notable severity, 97% confident.
data/source Defines a property on Array.prototype
notable severity, 97% confident.
data/source/property Defines function metadata near typed-array allocation
notable severity, 100% confident.
fs/file/write Node calls imported writeFileSync
notable severity, 100% confident.
process/create/shell Executes shell commands synchronously

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 99% confident.
library Official Babel monorepo repository metadata
notable severity, 99% confident.
package/quality ESLint plugin rules source path

20 of 139 traits shown

Identity

SHA-256 caeb2bdf78396771d8b0ff12d9343429297c36b9a6251ea002f7397119cdaebe
Canonical SHA-256 0017ec49ad3a5a7b4628c9f86314e38f1c0ddcfc7b937c6fc91f6a75c12ed8ec
Filename next-16.2.6.tgz
Package next
Version 16.2.6
PURL pkg:npm/[email protected]

Origin

Source harvest
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/next/-/next-16.2.6.tgz

Timeline

First seen 20 May 2026 21:05 UTC
First analyzed 7 Jun 2026 13:42 UTC
Last analyzed 26 Aug 2026 11:07 UTC
Last updated 26 Aug 2026 11:09 UTC

Labeling

Label unknown
Label source harvest
Traits version 73866