Open-source atomic malware analysis

Analyze another

pkg:github/actions/[email protected]

UNKNOWN
Verdict: BENIGN
Mal-ecule
K₂(Li₄Te)H₆(Cm₂₉Cr₃Db₁₈F₇Os₂Po₃)Md₆(Bk₂LiPa₅Pt)
Size 1.1 MB download
First seen 1 day ago
Analyzed 1 day ago
Ecosystem go

Referenced by 1 sample

Well-known

notable severity, 99% confident.
lib/web whatwg-url basicURLParse API marker
notable severity, 96% confident.
tool/development AutoRest code-generator header comment

Micro-behaviors

notable severity, 95% confident.
communications/http HTTP DELETE route method field
notable severity, 94% confident.
communications/http/request Source parses a bytes HTTP range expression
notable severity, 96% confident.
communications/http/services GitHub GraphQL API endpoint
notable severity, 94% confident.
communications/http/url Derives an origin from a URL
notable severity, 94% confident.
data Creates Node.js Buffer from JSON serialization
notable severity, 100% confident.
data/db ioredis driver reference
notable severity, 94% confident.
data/decode Masks character code to one byte
notable severity, 94% confident.
data/encode Assigns character code to array element
notable severity, 93% confident.
data/source/property Runs a high-iteration JavaScript loop
notable severity, 95% confident.
data/source/syntax Assigns user identity fields to an object
notable severity, 95% confident.
data/string Searches an inline alphabet table
notable severity, 96% confident.
os/env/vars Actions OIDC token request env vars
notable severity, 96% confident.
os/package-manager References npm audit command

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 95% confident.
package/testing Jest test framework

20 of 60 traits shown

Identity

SHA-256 e575a7167bad502e70ab78d871b0f8d991529f8d941c475d3f9eeff4f4a5815f
Filename pkg:github/actions/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem go

Timeline

First seen 26 Aug 2026 09:54 UTC
First analyzed 26 Aug 2026 09:48 UTC
Last analyzed 26 Aug 2026 10:09 UTC
Last updated 26 Aug 2026 10:11 UTC

Labeling

Label unknown