SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable found, but insufficient evidence to classify as malware. esbuild is a legitimate tool, binaries can be valid.

Verification Record

No verification record available.

Details

The package @esbuild/linux-loong64 contains an embedded executable file package/bin/esbuild. While the presence of an executable warrants careful review, it doesn't automatically indicate malicious intent. The esbuild project itself has a substantial following (39.4k stars, 1.2k forks), suggesting it's a legitimate build tool. Embedding pre-compiled binaries is a valid use case. Without further evidence of malicious behavior, it's not possible to classify this package as malware.

@esbuild/linux-loong64@0.25.12Clean
Unverified
Analysed at: 11/5/25, 7:23 AM
Source: https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.12.tgz
SHA256: 45bee0343b63121ca9ff6e424bada69711bf959bcb649a81c2c0ac9c22ad91fb
Confidence: Medium