“Constants and utilities about visitor keys to traverse AST.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₆)
Referenced by 10 samples
- benign ipibffjbdoelcneglljbbnogdcmhjfpd.crx fetched
- suspicious github.com-Tangerg-lynx-models-v0.0.0-20260804094723-48ba9fa99ee0.zip fetched
- benign v3.26.5 fetched
- benign github.com-Tangerg-lynx-models-v0.0.0-20260816195537-8d41fc5761ff.zip fetched
- benign github.com-znasllc-io-memql-component-worker-v0.0.0-20260816191939-e9d47586b690.zip fetched
- benign v3.26.12 fetched
- benign github.com-taiga-family-toolkit-v0.159.0.zip fetched
- benign github.com-znasllc-io-memql-component-router-v0.0.0-20260815005900-e468353d5fbc.zip fetched
- benign quick_link_github-1.2.1.xpi fetched
- benign 8214744c546c1e5c8f03dde8fab3a7353211988d fetched
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
component severity, 95% confident.
supply-chain/install-hook/scripts
prepare runs package-manager build
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
English function-word token "the"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest declares no runtime dependencies
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
supply-chain
notable severity, 80% confident.
install-hook
Package has 'prepare' hook that runs during install
Identity
| SHA-256 | cf9892e599eb93a3b0563962e17dec31251bbea74f7ea361536f3e0b3ce92cf3 |
|---|---|
| Canonical SHA-256 | 110c5b50a209273cf7a213fcfa157abadf65d7312ec2bf3f5fbcab5316fa1461 |
| Filename | [email protected] |
| Package | eslint-visitor-keys |
| Version | 4.0.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.0.0.tgz |
Timeline
| First seen | 4 Aug 2026 22:04 UTC |
|---|---|
| First analyzed | 4 Aug 2026 22:06 UTC |
| Last analyzed | 25 Aug 2026 09:18 UTC |
| Last updated | 25 Aug 2026 09:21 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b8c1c |
Not seeing what you expected? Let us know