Open-source atomic malware analysis

Analyze another

vfile 5.3.7

UNKNOWN
Verdict: BENIGN
SHA256: e82955700668f1198443fe90a649c75129b822266da8ddca7d1ac897d2d7b89b
“Virtual file format for text processing”
Mal-ecule
H₃(Cm₂Db₂Po)Md(Pa₄)
Size 17.9 KB download
First seen 16 days ago
Analyzed 10 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 85% confident.
data/format Markdown contains an HTML h1 heading
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 75% confident.
communications/ip Source references the localhost hostname
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 88% confident.
communications/http Calls a matcher in a conditional expression
component severity, 86% confident.
communications/http/request HTTP options contain hostname and port
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 84% confident.
fs/file References the Node.js current working directory

Metadata

notable severity, 90% confident.
package/manifest Package declares TypeScript types entry
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/testing/harness Joyent copyright header Node.js
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 95% confident.
package/files Filename is package.json
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

20 of 23 traits shown

Identity

SHA-256 e82955700668f1198443fe90a649c75129b822266da8ddca7d1ac897d2d7b89b
Canonical SHA-256 1852730bc364297e7a2eb39900d8d78c3a167c0f2a29d31704cae0aec3b8dfd0
Filename [email protected]
Package vfile
Version 5.3.7
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz

Timeline

First seen 10 Aug 2026 16:32 UTC
First analyzed 10 Aug 2026 16:33 UTC
Last analyzed 16 Aug 2026 20:23 UTC
Last updated 16 Aug 2026 20:23 UTC

Labeling

Label unknown
Traits version 285c0