Open-source atomic malware analysis

Analyze another

@routecraft-browser-0.5.0.tgz

TAR.GZ
Verdict: BENIGN
SHA256: f68a9020790e10736385f2406f11569e09de8f1352e00ebda0d4ccf06918bc6f
Mal-ecule
O(S)H(Po)Md(Pa₇)
Size 12.1 KB download
First seen 17 days ago
Analyzed 16 days ago
Ecosystem javascript
Source registry.npmjs.org

Well-known

component severity, 96% confident.
lib source map marker

Objectives

notable severity, 70% confident.
supply-chain/metadata-anomaly/dependency npm package has prepublishOnly hook
baseline severity, 90% confident.
anti-static/obfuscation/code-metrics Minified/compressed code (multiple indicators)
baseline severity, 70% confident.
supply-chain/hidden-payload/extensions High ratio of single character function names
component severity, 90% confident.
command-and-control/channel/deaddrop Markdown basename
component severity, 90% confident.
command-and-control/remote-command Regex component marker
component severity, 90% confident.
credential-access/email/webmail .value DOM property read on form element
component severity, 100% confident.
impact/destroy package defines test script
component severity, 94% confident.
supply-chain/recon-exfil Regex component marker

Micro-behaviors

notable severity, 82% confident.
process/create/shell npm package install command
baseline severity, 90% confident.
data/source Prototype guard checks constructor
component severity, 90% confident.
data/text/keywords Destructive delete verb

Metadata

notable severity, 85% confident.
package Package has prepublishOnly script
notable severity, 90% confident.
package/fields Package has TypeScript types entry
notable severity, 90% confident.
package/testing/presence Package uses Playwright testing framework
baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
import imports vitest from ^4.1.5
baseline severity, 95% confident.
import/npm::routecraft imports @routecraft/routecraft from ^0.5.0
baseline severity, 99% confident.
lang TypeScript declaration file (.d.ts/.d.cts/.d.mts)
component severity, 100% confident.
lang/encoded JavaScript file basename

20 of 25 traits shown

Identity

SHA-256 f68a9020790e10736385f2406f11569e09de8f1352e00ebda0d4ccf06918bc6f
Canonical SHA-256 33a548046839434fb7abebef9be85f123e2fef3bcf8e83e683960e49bb9bf354
Filename @routecraft-browser-0.5.0.tgz
Package @routecraft/browser

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@routecraft/browser/-/browser-0.5.0.tgz

Timeline

First seen 31 May 2026 16:55 UTC
First analyzed 1 Jun 2026 18:36 UTC
Last analyzed 1 Jun 2026 18:36 UTC
Last updated 1 Jun 2026 18:36 UTC

Labeling

Label unknown
Label source forager
Traits version 961ce