Open-source atomic malware analysis

Analyze another

react 3.30.3

UNKNOWN
Verdict: BENIGN
SHA256: fb670062ce43cbc4561e866ee742ccee97d23e3f7fc3ecdc0e25b8f2b7c25f6c
“React components for tiptap”
Mal-ecule
K(Li)O(S)H₅(CmDb₂FOsU₂)Md(Pa₆)
Size 126.6 KB download
First seen 2 days ago
Analyzed 2 days ago
Package pkg:npm/@tiptap/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 4 samples

Well-known

notable severity, 95% confident.
lib/development References Testing Library package scope

Objectives

notable severity, 75% confident.
supply-chain/impersonation/manifest Scoped React/Vue/Angular package name
component severity, 100% confident.
command-and-control/dropper node-v version prefix

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 92% confident.
data/control-flow JavaScript empty optional-binding catch
notable severity, 90% confident.
fs/file Reads files with Node.js
notable severity, 94% confident.
os/module Dynamic import followed by a provider reference
notable severity, 90% confident.
ui/window/manage Dispatches a synthetic DOM click event
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 80% confident.
package/dependencies Package has optional dependencies
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 95% confident.
package/testing Jest test framework
baseline severity, 90% confident.
build Code has source map reference
baseline severity, 80% confident.
file/profile English function-word token "the"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 100% confident.
package/testing/harness Node.js spec filename suffix
component severity, 100% confident.
file/extension File uses a source declaration extension

20 of 25 traits shown

Identity

SHA-256 fb670062ce43cbc4561e866ee742ccee97d23e3f7fc3ecdc0e25b8f2b7c25f6c
Canonical SHA-256 013f7f9fa9729d49bd986e68ede2a17d46d859453209564f673a6ea4b91fd8f4
Filename [email protected]
Package react
Version 3.30.3
PURL pkg:npm/@tiptap/[email protected]

Origin

Source x
Feed packagist.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@tiptap/react/-/react-3.30.3.tgz

Timeline

First seen 24 Aug 2026 02:11 UTC
First analyzed 24 Aug 2026 02:11 UTC
Last analyzed 24 Aug 2026 16:06 UTC
Last updated 24 Aug 2026 16:07 UTC

Labeling

Label unknown
Traits version b8c1c