SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable found, but likely a legitimate use case for a pre-compiled binary. Insufficient evidence to classify as malware.

Verification Record

No verification record available.

Details

The package @esbuild/linux-arm contains an embedded executable package/bin/esbuild. While this raises a security concern, it's a single piece of evidence. Given the package name and the project esbuild having a large number of stars and forks, it is likely a legitimate use case for a pre-compiled binary. Without further evidence, I cannot classify this as malware.

@esbuild/linux-arm@0.25.12Clean
Unverified
Analysed at: 11/5/25, 7:23 AM
Source: https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.12.tgz
SHA256: 318df2dc59ce5d2f0768fb0721fdcf20e639e2cd9d47765c6ddf4ae36f4a1142
Confidence: Medium