Open-source atomic malware analysis

Analyze another

deepmerge 3.3.0

UNKNOWN
Verdict: BENIGN
SHA256: da40d0150d334faa5e2f41ea3c44c38b4e5de131ba91794acdbac6e87a91db32
“A library for deep (recursive) merging of Javascript objects”
Mal-ecule
H₂(CmPo)Md(Pa₃)
Size 7.1 KB download
First seen 11 days ago
Analyzed 2 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 86% confident.
data/control-flow Starts a synchronous function expression
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 95% confident.
package/files JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library File is known bundler/wrapper output
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 95% confident.
package/dependencies npm manifest has empty dependencies object
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 da40d0150d334faa5e2f41ea3c44c38b4e5de131ba91794acdbac6e87a91db32
Filename [email protected]
Package deepmerge
Version 3.3.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/deepmerge/-/deepmerge-3.3.0.tgz

Timeline

First seen 11 Aug 2026 23:51 UTC
First analyzed 11 Aug 2026 23:52 UTC
Last analyzed 21 Aug 2026 02:36 UTC
Last updated 21 Aug 2026 02:37 UTC

Labeling

Label unknown
Traits version 73866