SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

Low confidence YARA match hardcoded_host_port_over_10k in chrome.ts is not sufficient to classify as malware.

Verification Record

No verification record available.

Details

The YARA rule hardcoded_host_port_over_10k matched in chrome.ts indicates a hardcoded hostname:port destination with a high port number. While this could be a sign of malicious activity, it's not definitive. The confidence is low, and without other strong indicators, it's insufficient to classify the package as malware. High port numbers are sometimes used for legitimate services. Also, the matched patterns are mostly negative lookups ($not_...), which reduces the severity of the finding.

@posthog/core@1.5.2Clean
Unverified
Analysed at: 11/10/25, 4:14 PM
Source: https://registry.npmjs.org/@posthog/core/-/core-1.5.2.tgz
SHA256: c2eea0279fd4dbd69fc2e6f40b0a9e44ef6e185143ad6910cb6cbd1c2d72d816
Confidence: Medium