Open-source atomic malware analysis

Analyze another

eslint-plugin-promise 4.2.1

UNKNOWN
Verdict: BENIGN
SHA256: dc90b05edfd6bb95e1b12b4e18ea61ac747694ee2cfce5d1c765d41e3427b207
“Enforce best practices for JavaScript promises”
Mal-ecule
H(Cm₂)Md₂(Pa₄)
Size 9.3 KB download
First seen 23 days ago
Analyzed 4 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 90% confident.
package/manifest package.json declares repository metadata
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 100% confident.
lang References the JavaScript .length property
component severity, 95% confident.
package/files Filename is package.json

Identity

SHA-256 dc90b05edfd6bb95e1b12b4e18ea61ac747694ee2cfce5d1c765d41e3427b207
Canonical SHA-256 00eda4b06882283cdd0a4ed53e6e18b800baf7b21fc72ac0ea3f7826c742fa5d
Filename [email protected]
Package eslint-plugin-promise
Version 4.2.1
PURL pkg:npm/[email protected]

Origin

Source x
Feed macupdate
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/eslint-plugin-promise/-/eslint-plugin-promise-4.2.1.tgz

Timeline

First seen 2 Aug 2026 05:49 UTC
First analyzed 2 Aug 2026 05:50 UTC
Last analyzed 21 Aug 2026 07:48 UTC
Last updated 21 Aug 2026 07:53 UTC

Labeling

Label unknown
Traits version 18b13