Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: dfd7d9e0b996fc88a42b35f3ff5ae70b49d768d398afd73b2bd37e39ba07e930
Mal-ecule
K(Li)Md(Pa₃)
Size 3.4 KB download
First seen 2 days ago
Analyzed 2 days ago
Ecosystem go

Referenced by 1 sample

Well-known

Objectives

component severity, 86% confident.
lateral-movement/brute-force Common account paired with root password

Micro-behaviors

component severity, 86% confident.
data/control-flow Starts a synchronous function expression

Metadata

notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 dfd7d9e0b996fc88a42b35f3ff5ae70b49d768d398afd73b2bd37e39ba07e930
Filename pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 23 Aug 2026 15:48 UTC
First analyzed 23 Aug 2026 15:47 UTC
Last analyzed 23 Aug 2026 16:07 UTC
Last updated 23 Aug 2026 16:08 UTC

Labeling

Label unknown