Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(FPo)Md(Pa₄)
Referenced by 1 sample
Objectives
component severity, 96% confident.
credential-access/theft
Password field name in structured data
Micro-behaviors
notable severity, 85% confident.
fs/file
Package script deletes files
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
component severity, 90% confident.
data/serialize
JSON-like object command field
component severity, 90% confident.
process/create
Agent tool-list configuration key
Metadata
notable severity, 90% confident.
package
README recommends scoped package installation
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality
package.json defines a package name
Identity
| SHA-256 | da56239a52b164fe73cf89b7f41c5a7fe1cd27d3fc394e11fb653d825db6d7cf |
|---|---|
| Filename | pkg:npm/%40tabler/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | github.com |
| Ecosystem | github |
Timeline
| First seen | 17 Aug 2026 20:56 UTC |
|---|---|
| First analyzed | 17 Aug 2026 20:55 UTC |
| Last analyzed | 17 Aug 2026 21:14 UTC |
| Last updated | 17 Aug 2026 21:13 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know