Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: d8950f0737d4715c976878bb44b8f42e67e04b3d3a151bf93033dd8b8a22d698
Mal-ecule
K(Te)H(Db)Md(Pa₄)
Size 9.1 KB download
First seen 6 days ago
Analyzed 6 days ago
Ecosystem github

Referenced by 1 sample

Well-known

notable severity, 98% confident.
tool/development/github-actions GitHub CodeQL Action source tree

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses owner/project coordinate
notable severity, 90% confident.
package/manifest/author Package declares Sindre Sorhus email
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 d8950f0737d4715c976878bb44b8f42e67e04b3d3a151bf93033dd8b8a22d698
Filename pkg:npm/[email protected]

Origin

Source x
Ecosystem github

Timeline

First seen 22 Aug 2026 22:32 UTC
First analyzed 22 Aug 2026 22:32 UTC
Last analyzed 22 Aug 2026 22:55 UTC
Last updated 22 Aug 2026 22:55 UTC

Labeling

Label unknown