Open-source atomic malware analysis

Analyze another

actions/upload-artifact v3

UNKNOWN
Verdict: BENIGN
SHA256: d33a065bfdec67a0b705a432b906011490f50ce3aaf857b783e825177b573d42
Mal-ecule
K(Te)H₆(Cm₁₂Cr₂Db₁₃F₆Os₃Po₂)Md₃(Bk₂InPa₆)
Size 212.9 KB download
First seen 16 days ago
Analyzed 11 hours ago
Package pkg:github/actions/upload-artifact@v3
Ecosystem github
Source codeload.github.com

Referenced by 10 samples

Well-known

notable severity, 99% confident.
tool/development VS Code devcontainer configuration file

Micro-behaviors

notable severity, 90% confident.
communications/http/header References the Retry-After header name
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
communications/socket Node TLS check disabled by option
notable severity, 94% confident.
crypto/hash Node.js createHash('sha256') call
notable severity, 90% confident.
data Creates Node.js Buffer from UTF-8 text
notable severity, 90% confident.
data/compress Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 96% confident.
data/decode parseInt parses an octal string
notable severity, 95% confident.
data/encode Encodes Node.js Buffer output as Base64
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
notable severity, 92% confident.
fs/file Creates a file read stream
notable severity, 90% confident.
fs/file/write Node asynchronously writes a file
notable severity, 90% confident.
fs/write/file JavaScript file write operation
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 95% confident.
package/files JavaScript/TypeScript file under dist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 95% confident.
package/testing Jest test framework
notable severity, 96% confident.
package/testing/harness Calls a test-case function

20 of 52 traits shown

Identity

SHA-256 d33a065bfdec67a0b705a432b906011490f50ce3aaf857b783e825177b573d42
Canonical SHA-256 16ca33dd8ad8f31f88c9d4e735004c6aa5dd4a943781bbba7ec3b403b63eed1b
Filename upload-artifact@v3
Package actions/upload-artifact
Version v3
PURL pkg:github/actions/upload-artifact@v3

Origin

Source x
Feed pkg.go.dev
Ecosystem github
Domain github.com
URL https://codeload.github.com/actions/upload-artifact/tar.gz/v3

Timeline

First seen 11 Aug 2026 16:13 UTC
First analyzed 11 Aug 2026 16:10 UTC
Last analyzed 27 Aug 2026 14:36 UTC
Last updated 27 Aug 2026 14:37 UTC

Labeling

Label unknown
Traits version b59b7