SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable and extension mismatch found. Insufficient evidence to classify as malware. Legitimate use cases exist.

Verification Record

No verification record available.

Details

The package @esbuild/darwin-x64 contains an embedded executable package/bin/esbuild which is flagged as an extension mismatch. While this raises a flag, it's not sufficient to label the package as malware. Embedded executables can have legitimate uses and extension mismatches can occur for various reasons. Without further evidence of malicious behavior, it is safer to assume it's not malware.

@esbuild/darwin-x64@0.25.12Clean
Unverified
Analysed at: 11/1/25, 11:35 PM
Source: https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.12.tgz
SHA256: bf56cdf7b330a8605395ee13de805c784c7346d0802c7cced8490b4bfac2291a
Confidence: Medium