Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm₂)Md(Pa₄)
Referenced by 10 samples
- benign kviewer-0.3.1.tgz fetched
- benign cellaxon.cellaxon-devpulse-0.5.1.vsix fetched
- hostile github.com-algolia-shipjs-v0.20.0.zip fetched
- benign @tiangong-ai-cli-0.0.42.tgz fetched
- suspicious github.com-dcos-dcos-ui-v5.0.41+incompatible.zip fetched
- benign stimulus-pdf-viewer-rails-0.5.0.gem fetched
- suspicious dbsx.xly-0.54.3.vsix fetched
- benign Mintplex-Labs-anything-llm-v1.15.0-source.tar.gz fetched
- benign github.com-toeverything-affine-v2026.7.5-canary.949+incompatible.zip fetched
- hostile @peopl-health-nexus-5.43.29.tgz fetched
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 70% confident.
package/dependencies
npm devDependency pinned to '*'
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Babel define-property helper
baseline severity, 80% confident.
file/profile
English function-word token "with"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 96% confident.
library
JavaScript distribution output path
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | e2056907c8e6811d740a8dee73172f76743a84ed14c43e08ff8d359326570914 |
|---|---|
| Canonical SHA-256 | 5725206025bff6dfd67982320c8d4a2297e93e8bd66ddcbbcbdad644031560df |
| Filename | [email protected] |
| Package | @jest/fake-timers |
| Version | 26.0.1 |
| PURL | pkg:npm/@jest/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | npmjs.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-26.0.1.tgz |
Timeline
| First seen | 3 Aug 2026 02:32 UTC |
|---|---|
| First analyzed | 3 Aug 2026 02:33 UTC |
| Last analyzed | 24 Aug 2026 12:21 UTC |
| Last updated | 24 Aug 2026 12:22 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | b8c1c |
Not seeing what you expected? Let us know