AI
Malicious npm package downloads and executes native payload
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | d1200971ac6fd9dace4d3b28a7e62fe5cdb507e48d5898ea8c17021e9be96f08 |
|---|---|
| Canonical SHA-256 | 0f2d0fb1e6785aa9bbc3b419231e8577656c7c958de9851a7eed926475f4ac1c |
| Filename | dolyame-ui-storybook-menu-35.5.6.tgz |
| Package | dolyame-ui-storybook-menu |
| Version | 35.5.6 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | osv.dev |
| Ecosystem | javascript |
| Domain | npmmirror.com |
| URL | https://registry.npmmirror.com/dolyame-ui-storybook-menu/-/dolyame-ui-storybook-menu-35.5.6.tgz |
Timeline
| First seen | 5 Aug 2026 13:16 UTC |
|---|---|
| First analyzed | 5 Aug 2026 23:53 UTC |
| Last analyzed | 5 Aug 2026 23:53 UTC |
| Last updated | 5 Aug 2026 23:53 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | forager |
| Traits version | b5ca8 |
Not seeing what you expected? Let us know