Open-source atomic malware analysis

Analyze another

helsingborg-stad-component-library-5.21.11.zip

ZIP
Verdict: BENIGN
Mal-ecule
O₃(CaDyXe)H₆(Cm₂CrDb₃F₄OsPo₅)Md(Bk)
Size 345.6 KB download
First seen 7 days ago
Analyzed 2 days ago
Ecosystem php
helsingborg-stad-component-library-5.21.11.zip zip
0x0 504b03040a0000000000db08c85c0000 PK...........\..actions/checkout workflow step
0x10 000000000000000000002b0009006865 ..........+...he
0x20 6c73696e67626f72672d737461642d63 lsingborg-stad-c
0x30 6f6d706f6e656e742d6c696272617279 omponent-library
0x40 2d323536303434622f55540500011f78 -256044b/UT....x
0x50 266a504b03040a0000000000db08c85c &jPK...........\
0x60 00000000000000000000000033000900 ............3...
0x70 68656c73696e67626f72672d73746164 helsingborg-stad
0x80 2d636f6d706f6e656e742d6c69627261 -component-libra
0x90 72792d ry-
component-library.php php
1 <?phpBenign context: high comment-to-code ratio (≥35%)
3 /**
4 * Plugin Name: component-libraryWordPress plugin metadata header
5 * Plugin URI: (#plugin_url#)
6 * Description: A library of blade components
10 * License: MIT
11 * License URI: https://opensource.org/licenses/MIT
12 * Text Domain: component-libraryWordPress plugin text domain
13 * Domain Path: /languages
14 */
23 if(function_exists('plugin_dir_path') && function_exists('plugin_url')) {
24 define('COMPONENTLIBRARY_PATH', plugin_dir_path(__FILE__));Self-reference via __FILE__
25 define('COMPONENTLIBRARY_URL', plugins_url('', __FILE__));
26 } else {
27 define('COMPONENTLIBRARY_PATH', dirname(__FILE__) . '/');Gets directory name
28 }
extensions.json json
1 {JSON data format
2 "recommendations": [
3 "biomejs.biome",
settings.json json
1 {JSON data format
2 "editor.formatOnSave": true,
3 "editor.defaultFormatter": "biomejs.biome",
block.json json
1 {JSON data format
2 "slug": "block",
3 "default": {
README.md markdown
3 A library of blade components compatible with WordPress.English language detection
8 ###
9 - **Components refuse to show up shortly after creation.**
10 o display the component. If you are encountering this issue, you may be able to utilities the componLLM instruction context
37 to each component. This data can be in every form,
38 but should focus on translating other input to view
39 data. This file can contain clear-text-classes. Cleanup verb
144 ### The controller
145 ll logic associated with a component. This file soule purpose is to remove any logic from the view. Delete verb
accordion.json json
1 {JSON data format
2 "slug": "accordion",
3 "default": {
anchorMenu.json json
1 {JSON data format
2 "slug": "anchorMenu",
3 "default": {
box.json json
1 {JSON data format
2 "slug": "box",
3 "default": {
accordion__item.json json
1 {JSON data format
2 "slug": "accordion__item",
3 "default": {

Showing the top 10 files for legibility — 6 more files (7 results) hidden. Open a file directly to see its full context.

Objectives

notable severity, 90% confident.
credential-access/files Package registry credential paths
notable severity, 90% confident.
execution/autoinstall Build npm install names package

Micro-behaviors

notable severity, 100% confident.
data/db WordPress get_option function symbol
notable severity, 86% confident.
data/db/delete Laravel model table truncate call
notable severity, 80% confident.
fs/write/file Writes data to an open file
notable severity, 100% confident.
process/interpreter PHP variable function invocation pattern
notable severity, 75% confident.
process/io Output buffer capture pattern

Metadata

20 of 66 traits shown

Identity

SHA-256 d8e5b6a6164b64300457adeccd085f1124be057370623062621b499334b1fbac
Canonical SHA-256 008f36efb71b6d0893f64e8e13245e96ebb35a96d5f24281a87de79dd6d61311
Filename helsingborg-stad-component-library-5.21.11.zip
Package helsingborg-stad/component-library
Version 5.21.11

Timeline

First seen 8 Jun 2026 06:15 UTC
First analyzed 13 Jun 2026 17:05 UTC
Last analyzed 13 Jun 2026 17:05 UTC
Last updated 13 Jun 2026 17:05 UTC

Labeling

Label unknown
Label source forager
Traits version 40f6c