“Constants and utilities about visitor keys to traverse AST.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₅)
Referenced by 10 samples
- benign v14.0.1.zip fetched
- benign github.com-metarhia-metadomain-v2.0.0-alpha.1+incompatible.zip fetched
- benign 9f7302141466aa6482940f15371237e9d9f4c34a fetched
- benign v1 fetched
- benign f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 fetched
- benign a149b24539044c92786ec39af8ba38c93496495d fetched
- benign v2.9.1 fetched
- benign v4.6.0 fetched
- benign v4.1.1 fetched
- benign github.com-ukhomeoffice-passports-form-wizard-v13.0.0+incompatible.zip fetched
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
component severity, 95% confident.
supply-chain/install-hook/scripts
prepare runs package-manager build
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 95% confident.
package/files
JavaScript package file under the dist tree
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
supply-chain
notable severity, 80% confident.
install-hook
Package has 'prepare' hook that runs during install
Identity
| SHA-256 | dc481363f4cf531c9fa5f40ca31b10a6f40d5e02e50ee846adb97095cb7a9147 |
|---|---|
| Canonical SHA-256 | 30ef1ef0b9c8be17f2347441d60ee2d4d3a3985ceb558746e059e0fbfc8fed88 |
| Filename | [email protected] |
| Package | eslint-visitor-keys |
| Version | 3.4.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.0.tgz |
Timeline
| First seen | 2 Aug 2026 18:46 UTC |
|---|---|
| First analyzed | 2 Aug 2026 18:48 UTC |
| Last analyzed | 22 Aug 2026 18:21 UTC |
| Last updated | 22 Aug 2026 18:22 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | e4c79 |
Not seeing what you expected? Let us know