Open-source atomic malware analysis

Analyze another

vfile 5.3.4

UNKNOWN
Verdict: BENIGN
SHA256: cc336a3bf56b5d60f19c19ce57033c47c02420d7397c4f58a770673f8d287402
“Virtual file format for text processing”
Mal-ecule
H₃(Cm₂Db₂Po)Md(Pa₅)
Size 16.7 KB download
First seen 16 days ago
Analyzed 3 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 7 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
data/format Markdown contains an HTML h1 heading
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 75% confident.
communications/ip Source references the localhost hostname
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 86% confident.
communications/http/request HTTP options contain hostname and port
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 84% confident.
fs/file References the Node.js current working directory

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality Package has Prettier configuration
baseline severity, 80% confident.
file/profile English function-word token "that"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/testing/harness Joyent copyright header Node.js
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 cc336a3bf56b5d60f19c19ce57033c47c02420d7397c4f58a770673f8d287402
Canonical SHA-256 177b61b65aafdb0d320822b0d8e3ba9d906a702f3921c8a463d256de79b78a5c
Filename [email protected]
Package vfile
Version 5.3.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/vfile/-/vfile-5.3.4.tgz

Timeline

First seen 10 Aug 2026 20:51 UTC
First analyzed 10 Aug 2026 20:53 UTC
Last analyzed 23 Aug 2026 21:47 UTC
Last updated 23 Aug 2026 21:47 UTC

Labeling

Label unknown
Traits version 73866