SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable found, but legitimate use case exists for pre-compiled binaries. Insufficient evidence to classify as malware.

Verification Record

No verification record available.

Details

The package @esbuild/linux-riscv64 contains an embedded executable package/bin/esbuild. While this raises a flag for potential security risks, it's a valid use case for pre-compiled binaries within a package, especially given the package name suggests a platform-specific build for esbuild. Without further evidence of malicious behavior, it's not possible to classify this as malware.

@esbuild/linux-riscv64@0.25.12Clean
Unverified
Analysed at: 11/5/25, 7:23 AM
Source: https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.12.tgz
SHA256: 64738a7389ebf341216c634916d8eef90f0cf57636f8de2c117f7ee89fdefa91
Confidence: Medium