Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Cm)Md₂(Pa₃)
Referenced by 1 sample
Micro-behaviors
notable severity, 75% confident.
communications/http/url
Contains a hardcoded remote HTTP(S) URL
Metadata
notable severity, 90% confident.
file
Several Base64-looking strings in source
notable severity, 90% confident.
package/manifest
npm package is configured for public publishing
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest declares no runtime dependencies
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 95% confident.
package/files
Filename is package.json
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | f3181be9a3aee846115f2e0a256721860eb386bfab8aca36cb00f5a9a609d167 |
|---|---|
| Filename | [email protected] |
| Package | meta-schema |
| Version | 1.8.0 |
| PURL | pkg:npm/@json-schema-tools/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@json-schema-tools/meta-schema/-/meta-schema-1.8.0.tgz |
Timeline
| First seen | 15 Aug 2026 14:43 UTC |
|---|---|
| First analyzed | 15 Aug 2026 14:42 UTC |
| Last analyzed | 15 Aug 2026 14:47 UTC |
| Last updated | 15 Aug 2026 14:46 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know