SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Embedded executable found, but project's popularity suggests legitimate use. Insufficient evidence to classify as malware.

Verification Record

No verification record available.

Details

The package @esbuild/linux-arm64 contains an embedded executable file named package/bin/esbuild. While the presence of an executable warrants careful scrutiny, it doesn't automatically indicate malicious intent. The esbuild project itself has a substantial following on GitHub (39.4k stars, 1.2k forks), suggesting a legitimate and widely used tool. Without further evidence of suspicious behavior or malicious code within the executable, it's reasonable to assume that the embedded executable serves a legitimate purpose within the esbuild build process. Therefore, I will classify this package as not malware.

@esbuild/linux-arm64@0.25.12Clean
Unverified
Analysed at: 11/5/25, 7:23 AM
Source: https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.12.tgz
SHA256: d5e01d210e026823d559e2b82554cdcdab6fd87c4a57b519b392ef183c1f87fd
Confidence: Medium