Open-source atomic malware analysis

Analyze another

pkg:github/dessant/lock-threads@08e671be8ac8944d0e132aa71d0ae8ccfb347675

UNKNOWN
Verdict: BENIGN
Mal-ecule
K(Li)H₅(Cm₁₆Db₁₄F₄Os₃Po₄)Md₆(Bk₂InLiPa₂Pt)
Size 410.5 KB download
First seen 4 days ago
Analyzed 4 days ago
Ecosystem golang

Referenced by 1 sample

Well-known

notable severity, 99% confident.
lib/format iconv-lite string decoder implementation

Micro-behaviors

notable severity, 96% confident.
communications/http Access-token field reference
notable severity, 94% confident.
communications/http/request Calls a response JSON parser
notable severity, 98% confident.
communications/http/services Imports the GitHub Actions API client
notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 90% confident.
communications/socket Node TLS check disabled by option
notable severity, 90% confident.
data/compress Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow JavaScript empty named-parameter catch
notable severity, 90% confident.
data/decode JavaScript hex-to-integer conversion
notable severity, 90% confident.
data/encode Builds characters with String.fromCharCode
notable severity, 90% confident.
data/source/property Reads constructor properties repeatedly
notable severity, 90% confident.
fs/file Calls readFileSync
notable severity, 90% confident.
fs/write/file Writes a buffer argument to a stream
notable severity, 90% confident.
process/create/shell Package manager run build in shell chain
notable severity, 90% confident.
process/fd Pipes a Node response stream

Metadata

notable severity, 98% confident.
build Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile Escaped Unicode codepoint in source
notable severity, 95% confident.
library Preserves original JavaScript console methods
notable severity, 95% confident.
package/files JavaScript file under dist directory
notable severity, 90% confident.
package/manifest Repository identifies major Git host

20 of 43 traits shown

Identity

SHA-256 fea7142d218d12f8736bd117ac9dc28b78dfc5708daece2daa83bbf1b39409e6
Filename pkg:github/dessant/lock-threads@08e671be8ac8944d0e132aa71d0ae8ccfb347675

Origin

Source x
Ecosystem golang

Timeline

First seen 24 Aug 2026 23:43 UTC
First analyzed 24 Aug 2026 20:02 UTC
Last analyzed 25 Aug 2026 00:00 UTC
Last updated 25 Aug 2026 00:03 UTC

Labeling

Label unknown