Open-source atomic malware analysis

Analyze another

pkg:npm/%40mattrglobal/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: cbaca739abc9ec4baa27bc9bb51d8cfd7dd46375b62c7948b994e7e6fa691de4
Mal-ecule
H₂(CmF)Md(Pa₅)
Size 11.6 KB download
First seen 2 days ago
Analyzed 2 days ago
Ecosystem go

Referenced by 1 sample

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
fs/file Package script deletes files
baseline severity, 90% confident.
data Constructs a Uint8Array buffer

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile English function-word token "the"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 cbaca739abc9ec4baa27bc9bb51d8cfd7dd46375b62c7948b994e7e6fa691de4
Filename pkg:npm/%40mattrglobal/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 26 Aug 2026 18:38 UTC
First analyzed 26 Aug 2026 18:35 UTC
Last analyzed 26 Aug 2026 18:56 UTC
Last updated 26 Aug 2026 18:58 UTC

Labeling

Label unknown