Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(FPo)Md(Pa₄)
Referenced by 8 samples
- hostile github.com-bex-co-bex-v0.0.0-20260808002435-e3d0427c797e.zip fetched
- hostile github.com-stephanrauh-ngx-extended-pdf-viewer-v0.0.0-20260802130616-4173fffa0133.zip fetched
- benign @optivor-next-1.2.1.tgz fetched
- benign gitee.com-ivfzhou-csms-v0.0.0-20260724155039-6c404ebb9069.zip fetched
- benign Marko-JS.marko-vscode-3.1.6.vsix fetched
- benign next-16.2.6.tgz fetched
- hostile aisthetix-virtual-try-on-0.5.3.zip fetched
- suspicious @wavemaker-ai-studio-runtime-integration-1.0.0-next.27766.tgz fetched
Objectives
component severity, 100% confident.
anti-static/obfuscation/string
try string fragment
Micro-behaviors
notable severity, 85% confident.
fs/file
Package script deletes files
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 84% confident.
data/control-flow
Invokes function with .call()
baseline severity, 90% confident.
data/string
String split to array assignment
baseline severity, 80% confident.
os/env
Access environment variables
baseline severity, 84% confident.
process/exit
Node process.exit(0) call
baseline severity, 80% confident.
process/info
Reads Node.js arguments through process.argv
component severity, 100% confident.
os/console
References the JavaScript console object
Metadata
notable severity, 95% confident.
package/manifest
Package declares a jsDelivr CDN entry
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 90% confident.
file
Source file has low overall entropy
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
library
Exports a JavaScript module
baseline severity, 100% confident.
package
Package version uses numeric SemVer format
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
component severity, 100% confident.
file/extension
Markdown document file extension
20 of 36 traits shown
Identity
| SHA-256 | dfb154e9454768619648f4a083800239950ae7e468815aa970cd351e32d2995e |
|---|---|
| Filename | [email protected] |
| Package | baseline-browser-mapping |
| Version | 2.11.10 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | wordpress.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.10.tgz |
Timeline
| First seen | 1 Aug 2026 14:38 UTC |
|---|---|
| First analyzed | 1 Aug 2026 14:40 UTC |
| Last analyzed | 12 Aug 2026 22:28 UTC |
| Last updated | 12 Aug 2026 22:28 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know