Open-source atomic malware analysis

Analyze another

csstype 2.6.4

UNKNOWN
Verdict: BENIGN
SHA256: cdc8714c119cf88c14ada4fc9fe7f65fa7fef91c21c7479b50f90de136ce55ea
“Strict TypeScript and Flow types for style based on MDN data”
Mal-ecule
H(Po)Md₂(Pa₃)
Size 229.9 KB download
First seen 18 days ago
Analyzed 9 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Micro-behaviors

notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 95% confident.
communications/url Encoded URL references MDN documentation
component severity, 90% confident.
ui/window Browser selector targets textarea elements
component severity, 78% confident.
ui/window/manage References an iframe HTML element

Metadata

notable severity, 97% confident.
file Many Base64-like comment spans in JavaScript
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepublish' hook that runs during install

Identity

SHA-256 cdc8714c119cf88c14ada4fc9fe7f65fa7fef91c21c7479b50f90de136ce55ea
Filename [email protected]
Package csstype
Version 2.6.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/csstype/-/csstype-2.6.4.tgz

Timeline

First seen 11 Aug 2026 23:53 UTC
First analyzed 11 Aug 2026 23:52 UTC
Last analyzed 21 Aug 2026 02:36 UTC
Last updated 21 Aug 2026 02:39 UTC

Labeling

Label unknown
Traits version 73866