Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(DbPo)Md(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 90% confident.
data/decode
JavaScript hex-to-integer conversion
notable severity, 90% confident.
process/hook/console
Reassigns console.log method
baseline severity, 90% confident.
data
Constructs a Uint8Array buffer
baseline severity, 100% confident.
data/encode
parseInt with radix 16
baseline severity, 80% confident.
data/source/syntax
Copies one indexed array element to another
component severity, 88% confident.
communications/http
Calls a matcher in a conditional expression
Metadata
notable severity, 90% confident.
package/manifest
npm package is configured for public publishing
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 100% confident.
lang
CommonJS require symbol
component severity, 95% confident.
package/files
Filename is package.json
Identity
| SHA-256 | d2bb9aa4d927d2ea978fb1aded87825fb783ee6d4e842c69b7003cefe3b591cb |
|---|---|
| Filename | pkg:npm/%40webassemblyjs/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | hub.docker.com |
| Ecosystem | container |
Timeline
| First seen | 16 Aug 2026 20:21 UTC |
|---|---|
| First analyzed | 16 Aug 2026 20:20 UTC |
| Last analyzed | 16 Aug 2026 20:23 UTC |
| Last updated | 16 Aug 2026 20:22 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know