Open-source atomic malware analysis

Analyze another

rc-tree-select 5.5.5

UNKNOWN
Verdict: BENIGN
SHA256: fd38741802e060b73def041a04bb37ab52f0def0ea6d7ce35ad29cd2cc10ea6f
“tree-select ui component for react”
Mal-ecule
H₄(CmDb₃PoU)Md₂(Pa₄)
Size 36.1 KB download
First seen 16 days ago
Analyzed 11 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 2 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 90% confident.
data/format Markdown references a remote image
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 96% confident.
process/create AI agent permission bypass flag
notable severity, 90% confident.
ui/window Sets a checkbox or radio checked state
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 90% confident.
communications/url JavaScript comment contains a URL
component severity, 92% confident.
ui/window/manage CSS sets element width to zero

Metadata

notable severity, 90% confident.
file Several Base64-looking strings in source
notable severity, 85% confident.
package Package declares a prepublish-only script
notable severity, 90% confident.
package/dependencies Dependency name matches an install role
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 90% confident.
build Babel define-property helper
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
component severity, 100% confident.
file/extension JavaScript source filename extension

20 of 22 traits shown

Identity

SHA-256 fd38741802e060b73def041a04bb37ab52f0def0ea6d7ce35ad29cd2cc10ea6f
Canonical SHA-256 449f85b8e3473752e5a68ce7c5e9ca45cecea87a1a665edac3a5e7a8ad1f8660
Filename [email protected]
Package rc-tree-select
Version 5.5.5
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/rc-tree-select/-/rc-tree-select-5.5.5.tgz

Timeline

First seen 12 Aug 2026 04:56 UTC
First analyzed 12 Aug 2026 04:58 UTC
Last analyzed 16 Aug 2026 23:48 UTC
Last updated 16 Aug 2026 23:49 UTC

Labeling

Label unknown
Traits version 73866