“Global identifiers from different JavaScript environments”
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Te)H(Db)Md(Pa₂)
Referenced by 10 samples
- benign github.com-asheshgoplani-agent-deck-v1.9.50.zip fetched
- benign b7cec7526559c32f1616476ff32d17ba4c59b2d6 fetched
- benign github.com-traceloop-ai-traceloop-v0.0.0-20260802051928-084442b7cd02.zip fetched
- hostile github.com-inipew-sing-box-v0.0.0-20260726040531-0fd7cc3679fd.zip fetched
- benign 5ecb98a3c6b747ed38dc09f787459979aebb39be fetched
- benign github.com-alevyinroc-Mainroad-v0.0.0-20260813174923-340491e2083f.zip fetched
- benign v0.28.2.tar.gz fetched
- benign github.com-nextcloud-text-v27.1.8+incompatible.zip fetched
- benign v4.3.0 fetched
- benign github.com-Khan-perseus-v0.0.0-20260731215132-64c06a5a6c6b.zip fetched
Well-known
notable severity, 98% confident.
tool/development
GitHub CodeQL Action source archive member
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
Micro-behaviors
notable severity, 92% confident.
data/control-flow
CommonJS module re-exports required package
component severity, 90% confident.
data/serialize
JSON-like object result field
Metadata
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 95% confident.
package/files
Filename is package.json
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | fb1342316a0d06e4b583639bb86e9e4d5a9e453f3d298cf7fb2a27d837246491 |
|---|---|
| Canonical SHA-256 | 2998fa25447dc5e0032334703ccec8604d66b750afb5b84e13eb778bf66fbb38 |
| Filename | [email protected] |
| Package | globals |
| Version | 13.23.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/globals/-/globals-13.23.0.tgz |
Timeline
| First seen | 2 Aug 2026 12:06 UTC |
|---|---|
| First analyzed | 2 Aug 2026 12:07 UTC |
| Last analyzed | 18 Aug 2026 17:40 UTC |
| Last updated | 18 Aug 2026 17:38 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 298c2 |
Not seeing what you expected? Let us know