Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₆DbPo₂)Md(Pa₂)
Referenced by 1 sample
Micro-behaviors
notable severity, 94% confident.
communications/http
Builds Bearer authorization header from token
notable severity, 65% confident.
communications/http/header
References the application/json media type
notable severity, 75% confident.
communications/http/server
Node.js http.createServer()
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 86% confident.
communications/socket
Node generic server listens on endpoint
notable severity, 90% confident.
data/db
Bun SQLite database open
notable severity, 80% confident.
process/hook
Registers request interception hook
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 90% confident.
data
Constructs a Uint8Array buffer
baseline severity, 82% confident.
data/string
Searches strings with includes or indexOf
component severity, 93% confident.
communications/http/request
Contains an HTTP Bearer authorization prefix
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
20 of 25 traits shown
Identity
| SHA-256 | f2129c2fb6e8d5e2458c42a4eaf9a392e8d01b7a901361ba3384a87c51b45551 |
|---|---|
| Canonical SHA-256 | 000b2bd784839fc40af0473145810d29a6ea812d058a38640800e5ae7579de40 |
| Filename | [email protected] |
| Package | bsync |
| Version | 0.0.41 |
| PURL | pkg:npm/@atproto/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@atproto/bsync/-/bsync-0.0.41.tgz |
Timeline
| First seen | 14 Aug 2026 18:32 UTC |
|---|---|
| First analyzed | 14 Aug 2026 18:34 UTC |
| Last analyzed | 15 Aug 2026 06:56 UTC |
| Last updated | 15 Aug 2026 06:54 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | e4c79 |
Not seeing what you expected? Let us know