Open-source atomic malware analysis

Analyze another

@octokit/graphql 8.1.1

UNKNOWN
Verdict: BENIGN
SHA256: eab4e8a3bcd32027abe87173018e02dfa5aceeee36279d765bdeada2808370d5
“GitHub GraphQL API client for browsers and Node”
Mal-ecule
H₂(Cm₂Db)Md(Pa₆)
Size 8.0 KB download
First seen 12 days ago
Analyzed 6 days ago
Package pkg:npm/@octokit/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Micro-behaviors

notable severity, 94% confident.
communications/http/request Configures an HTTP POST request
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
component severity, 90% confident.
communications/url Encoded URL documentation context
component severity, 90% confident.
data/serialize JSON-like object result field

Metadata

notable severity, 90% confident.
package README recommends scoped package installation
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository uses GitHub shorthand
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 eab4e8a3bcd32027abe87173018e02dfa5aceeee36279d765bdeada2808370d5
Canonical SHA-256 04c00b0f472ef65c137c7f3dee14ac0fbdfe800dbc8445bf55222c59e5cf164c
Filename [email protected]
Package @octokit/graphql
Version 8.1.1
PURL pkg:npm/@octokit/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@octokit/graphql/-/graphql-8.1.1.tgz

Timeline

First seen 15 Aug 2026 00:09 UTC
First analyzed 15 Aug 2026 00:11 UTC
Last analyzed 21 Aug 2026 05:02 UTC
Last updated 21 Aug 2026 05:02 UTC

Labeling

Label unknown