Open-source atomic malware analysis

Analyze another

rimraf 2.5.4

UNKNOWN
Verdict: BENIGN
SHA256: f03c611c5b0072a7ac480bed8d4385d4de953bfbfe46013a9b3c07c9c707b156
“A deep deletion module for node (like `rm -rf`)”
Mal-ecule
H₂(F₂Os)
Size 5.0 KB download
First seen 18 days ago
Analyzed 18 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 85% confident.
fs/chmod Node calls chmod to change permissions
notable severity, 80% confident.
os/sysinfo/platform Reads process.platform for host selection
baseline severity, 90% confident.
fs/file Deletes a file synchronously with fs.unlinkSync
baseline severity, 80% confident.
process/info Reads Node.js arguments through process.argv

Metadata

baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 70% confident.
import Imports the Node.js fs module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/manifest package.json declares repository metadata
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
file File has 30 or more lines

Identity

SHA-256 f03c611c5b0072a7ac480bed8d4385d4de953bfbfe46013a9b3c07c9c707b156
Canonical SHA-256 2cced1b32354235039d1efc6ed2612e977cc1ec2f5cb4afc22e5cc01e4b282ff
Filename [email protected]
Package rimraf
Version 2.5.4
PURL pkg:npm/[email protected]

Origin

Source x
Feed brew.sh
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/rimraf/-/rimraf-2.5.4.tgz

Timeline

First seen 12 Aug 2026 01:29 UTC
First analyzed 12 Aug 2026 01:30 UTC
Last analyzed 12 Aug 2026 04:04 UTC
Last updated 12 Aug 2026 04:02 UTC

Labeling

Label unknown
Traits version 73866