Open-source atomic malware analysis

Analyze another

markdown-it-anchor 8.6.7

UNKNOWN
Verdict: BENIGN
SHA256: d8c7edb4c32ade7aecdc06328947bc41c0b54024e71ee0d732fa8a51817601dd
“Header anchors for markdown-it.”
Mal-ecule
H₂(Cm₂Db)Md(Pa₆)
Size 25.9 KB download
First seen 24 days ago
Analyzed 3 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Objectives

component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format
component severity, 95% confident.
supply-chain/install-hook/scripts prepare runs package-manager build

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 70% confident.
data/encode URL-encodes data via encodeURIComponent
baseline severity, 75% confident.
communications/http HTTP URL string literal
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 70% confident.
package/dependencies npm devDependency pinned to '*'
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 95% confident.
package/manifest Package declares an unpkg CDN entry
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 70% confident.
file Very low whitespace ratio (minified/compressed)
baseline severity, 80% confident.
file/profile English function-word token "for"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

supply-chain

notable severity, 80% confident.
install-hook Package has 'prepare' hook that runs during install

Identity

SHA-256 d8c7edb4c32ade7aecdc06328947bc41c0b54024e71ee0d732fa8a51817601dd
Canonical SHA-256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
Filename [email protected]
Package markdown-it-anchor
Version 8.6.7
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-8.6.7.tgz

Timeline

First seen 4 Aug 2026 10:36 UTC
First analyzed 4 Aug 2026 10:37 UTC
Last analyzed 25 Aug 2026 00:51 UTC
Last updated 25 Aug 2026 00:53 UTC

Labeling

Label unknown
Traits version 72034