“Essential crypto utility library - ledger-lib”
AI
Malicious npm package exfiltrates secrets
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₄(Eu₂S₆Ca₃Dy₃)H₅(Cm₄CrF₄OsPo₂)Md₂(InPa)
Loading file contents…
Loading traits…
Identity
| SHA-256 | fe636d923c7a1984f0028415f7d5b4c1b641756c0b1d456cf16d3030d9fa58d1 |
|---|---|
| Canonical SHA-256 | 1546abb8b08c6d4c265a84ee4f0104ca89499feb92b90502cb1c96c10f9cea71 |
| Filename | ledger-lib-1.0.1.tgz |
| Package | ledger-lib |
| Version | 1.0.1 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | osv.dev |
| Ecosystem | javascript |
| Domain | npmmirror.com |
| URL | https://registry.npmmirror.com/ledger-lib/-/ledger-lib-1.0.1.tgz |
Timeline
| First seen | 5 Aug 2026 09:00 UTC |
|---|---|
| First analyzed | 5 Aug 2026 10:52 UTC |
| Last analyzed | 5 Aug 2026 10:52 UTC |
| Last updated | 5 Aug 2026 10:52 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | forager |
| Traits version | b5ca8 |
Not seeing what you expected? Let us know