Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(CmFPo)Md(Bk)
Referenced by 1 sample
Well-known
baseline severity, 100% confident.
tool/development
Uses sed for text processing
component severity, 86% confident.
tool/sysadmin/kubernetes
Kubernetes kind field near apiVersion
Objectives
component severity, 90% confident.
execution/automation
Skill names a URL destination
component severity, 90% confident.
supply-chain/recon-exfil
AWS or private-key credential variable name
Micro-behaviors
notable severity, 84% confident.
communications/http/download
Structured file has curl/wget output path
notable severity, 86% confident.
fs/file/write
Shell echo redirects output to a file
notable severity, 94% confident.
process/create/shell
GitHub Actions creates and pushes a tag
baseline severity, 88% confident.
os/service
GitHub Actions GITHUB_TOKEN secret
baseline severity, 98% confident.
os/syscall
Linux kernel crypto/sound/tools tree path
component severity, 70% confident.
fs
Contains the grep command keyword
Metadata
notable severity, 95% confident.
build
Job environment references an Actions secret
baseline severity, 100% confident.
file/extension
POSIX shell script extension
baseline severity, 80% confident.
file/profile
Contains common English function words
component severity, 90% confident.
file
File has 30 or more lines
component severity, 82% confident.
file/catalog
Grafana service name
component severity, 90% confident.
package/files
File has a .png extension
Identity
| SHA-256 | ce026fbd3fecb64abc9f75c334ad70299fa6eb871cb3953333a63a8d5ec5b98e |
|---|---|
| Canonical SHA-256 | 0baec79e6ba39650436695181b3ecb8d71996f3c4a68a995df48623c09f4dd26 |
| Filename | 64b1c8260d69a9b1d9a186df25c51358b92f7662 |
| Package | grafana/helm-charts |
| Version | 64b1c8260d69a9b1d9a186df25c51358b92f7662 |
| PURL | pkg:github/grafana/helm-charts@64b1c8260d69a9b1d9a186df25c51358b92f7662 |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/grafana/helm-charts/tar.gz/64b1c8260d69a9b1d9a186df25c51358b92f7662 |
Timeline
| First seen | 11 Aug 2026 21:48 UTC |
|---|---|
| First analyzed | 11 Aug 2026 21:53 UTC |
| Last analyzed | 12 Aug 2026 11:54 UTC |
| Last updated | 12 Aug 2026 11:54 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 73866 |
Not seeing what you expected? Let us know