Local reference
Suspicious dependency
Inferred
Mal-ecule
Md₂(Pa₃)
Referenced by 3 samples
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 70% confident.
package/dependencies
npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | d380a93de243bb7a548668bee351593c4f52dff4974517143157acf00ef57812 |
|---|---|
| Canonical SHA-256 | 0dd7c626177216285cb53bc96f9bbc269ff0ad7279749241cb52ebd17fbe1ae5 |
| Filename | pkg:npm/%40tanstack/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | go |
Timeline
| First seen | 12 Aug 2026 18:21 UTC |
|---|---|
| First analyzed | 12 Aug 2026 18:22 UTC |
| Last analyzed | 13 Aug 2026 05:26 UTC |
| Last updated | 13 Aug 2026 05:24 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know