Open-source atomic malware analysis

Analyze another

pkg:npm/%40octokit/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: dd836daad1528633cb9f42f2cecbc29ec9291936a92f3cec41933e05417e853d
Mal-ecule
K(Te)H₂(CmPo)Md(Pa₃)
Size 157.1 KB download
First seen 3 days ago
Analyzed 1 day ago
Ecosystem github

Referenced by 2 samples

Well-known

notable severity, 98% confident.
tool/development/github-actions GitHub CodeQL Action source archive member

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 94% confident.
process/create/vcs JavaScript Git repository query command

Metadata

notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
baseline severity, 80% confident.
file/profile English function-word token "the"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 94% confident.
library TypeScript declaration basename
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 dd836daad1528633cb9f42f2cecbc29ec9291936a92f3cec41933e05417e853d
Filename pkg:npm/%40octokit/[email protected]

Origin

Source x
Ecosystem github

Timeline

First seen 24 Aug 2026 06:27 UTC
First analyzed 24 Aug 2026 05:53 UTC
Last analyzed 26 Aug 2026 19:08 UTC
Last updated 26 Aug 2026 19:11 UTC

Labeling

Label unknown