AI
legitimate Go logging library
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H₂(Cm₅Db₂)
Referenced by 1 sample
Well-known
notable severity, 99% confident.
lib/cloud
AWS SDK for Go v1 source import
Micro-behaviors
notable severity, 90% confident.
communications/http
References a loopback HTTP URL
notable severity, 95% confident.
communications/http/lib
Constructs a Go HTTP client
notable severity, 90% confident.
communications/http/url
Cleartext http:// URL
notable severity, 90% confident.
communications/ip
HTTP URL uses private 192.168 address
notable severity, 85% confident.
communications/socket
Go net.Dial call
notable severity, 85% confident.
data/encode
Go calls a base64 encoding method
notable severity, 85% confident.
data/serialize
Go JSON unmarshal call
Metadata
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 95% confident.
package/testing/harness
Go testing package
baseline severity, 70% confident.
package/testing/presence
Go test file suffix
component severity, 90% confident.
package/files
File has a .png extension
Identity
| SHA-256 | f418b8ef4c8595e5f2c04b6f55776593f864730b22412b5a7b3e1caf2298c652 |
|---|---|
| Canonical SHA-256 | 003c6146b75fcfa51ce5a24f2c1149a8f914d729bf79805690ecead4457fbdc2 |
| Filename | v1.1.4.zip |
| Package | github.com/apex/log |
| Version | v1.1.4 |
| PURL | pkg:golang/github.com/apex/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | go |
| Domain | golang.org |
| URL | https://proxy.golang.org/github.com/apex/log/@v/v1.1.4.zip |
Timeline
| First seen | 21 Aug 2026 11:06 UTC |
|---|---|
| First analyzed | 21 Aug 2026 15:37 UTC |
| Last analyzed | 21 Aug 2026 18:18 UTC |
| Last updated | 21 Aug 2026 18:19 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 40b8c |
Not seeing what you expected? Let us know