Open-source atomic malware analysis

Analyze another

@tanstack/react-virtual 3.11.2

UNKNOWN
Verdict: BENIGN
SHA256: da20a9219cfa3fd2efb69aab7a5dc2cb750cc285997ab9f4d4f423ecf70ab647
“Headless UI for virtualizing scrollable elements in React”
Mal-ecule
Md₃(LiPa₃)
Size 3.8 KB download
First seen 13 days ago
Analyzed 12 days ago
Package pkg:npm/@tanstack/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 85% confident.
library Declares empty npm scripts object
notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 da20a9219cfa3fd2efb69aab7a5dc2cb750cc285997ab9f4d4f423ecf70ab647
Canonical SHA-256 3e2985b93f98490cbde1306fb7d94dfd37e8a548121b7b6158131b68b7cf598c
Filename react-virtual-3.11.2.tgz
Package @tanstack/react-virtual
Version 3.11.2
PURL pkg:npm/@tanstack/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.11.2.tgz

Timeline

First seen 12 Aug 2026 03:23 UTC
First analyzed 12 Aug 2026 03:31 UTC
Last analyzed 12 Aug 2026 15:37 UTC
Last updated 12 Aug 2026 15:36 UTC

Labeling

Label unknown
Label source upload
Traits version 73866