Open-source atomic malware analysis

Analyze another

@opentelemetry/instrumentation-redis-4 0.46.0

UNKNOWN
Verdict: BENIGN
SHA256: e658809bc233dac43eb7a9d35a6bc64eddb50ad7752bae439bd48cc39ec61919
“OpenTelemetry instrumentation for `redis` v4 database client for Redis”
Mal-ecule
O(S)H₃(CmDbPo)Md(Pa₆)
Size 18.6 KB download
First seen 16 days ago
Analyzed 5 days ago
Package pkg:npm/@opentelemetry/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 6 samples

Objectives

notable severity, 85% confident.
supply-chain/impersonation Package name ends with a numeric suffix
component severity, 80% confident.
supply-chain/install-hook/package Repository uses GitHub shorthand format

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest npm package is configured for public publishing
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 96% confident.
library Transpiled CommonJS re-export barrel
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 e658809bc233dac43eb7a9d35a6bc64eddb50ad7752bae439bd48cc39ec61919
Canonical SHA-256 0d028feb3cebbf01a11372da485c9fe5ec17432cdde73fe725885ce02e0a1c85
Filename [email protected]
Package @opentelemetry/instrumentation-redis-4
Version 0.46.0
PURL pkg:npm/@opentelemetry/[email protected]

Origin

Source x
Feed github.com
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@opentelemetry/instrumentation-redis-4/-/instrumentation-redis-4-0.46.0.tgz

Timeline

First seen 12 Aug 2026 19:58 UTC
First analyzed 12 Aug 2026 20:00 UTC
Last analyzed 24 Aug 2026 00:18 UTC
Last updated 24 Aug 2026 00:23 UTC

Labeling

Label unknown
Traits version b8c1c