Open-source atomic malware analysis

Analyze another

pkg:npm/[email protected]

UNKNOWN
Verdict: BENIGN
SHA256: fe1e2967cbea159c111f54ee64ce7385ec6b900223cad4fadc441456c40e6fcb
Mal-ecule
H₂(CmDb)Md(Pa₃)
Size 4.1 KB download
First seen 2 days ago
Analyzed 2 days ago

Referenced by 2 samples

Micro-behaviors

notable severity, 86% confident.
communications/http/url Reads current path from browser location
notable severity, 90% confident.
data/string Chains multiple JavaScript string replacements
baseline severity, 70% confident.
fs/path Local script path reference
component severity, 86% confident.
data/control-flow Module scope assigns zero-argument call

Metadata

notable severity, 90% confident.
package Package uses git hooks tooling
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile English function-word token "with"
baseline severity, 70% confident.
import Imports the Node.js fs module
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 100% confident.
file/extension JavaScript source filename extension
component severity, 70% confident.
package/dependencies npm manifest has many devDependencies

Identity

SHA-256 fe1e2967cbea159c111f54ee64ce7385ec6b900223cad4fadc441456c40e6fcb
Filename pkg:npm/[email protected]

Origin

Source x
Feed malwarebazaar

Timeline

First seen 24 Aug 2026 12:41 UTC
First analyzed 24 Aug 2026 12:38 UTC
Last analyzed 24 Aug 2026 13:02 UTC
Last updated 24 Aug 2026 13:05 UTC

Labeling

Label unknown