SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable found, but insufficient evidence to classify as malware. Esbuild is a legitimate project that uses pre-compiled binaries.

Verification Record

No verification record available.

Details

The package @esbuild/netbsd-x64 contains an embedded executable package/bin/esbuild. While this raises a flag, it's not sufficient to classify the package as malware. The esbuild project itself is a legitimate and well-known project with a large number of stars and forks on GitHub. Embedded executables can be a legitimate part of software distribution, particularly for pre-compiled binaries. Without further evidence of malicious behavior, it's safer to assume this is a legitimate use case.

@esbuild/netbsd-x64@0.25.12Clean
Unverified
Analysed at: 11/5/25, 7:23 AM
Source: https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.12.tgz
SHA256: d706a08a052577e74474036f51604b9c19dff434c1e14b8465ccd452fb225f95
Confidence: Medium