SafeDep
Install GitHub App

Summary

Low confidence YARA match js_hex_obfuscation in a Go file. Insufficient evidence to classify as malware.

Verification Record

No verification record available.

Details

The package google.golang.org/protobuf version v1.36.10 is not classified as malware. The only evidence is a YARA rule match js_hex_obfuscation in the file pack_test.go. This rule indicates javascript function obfuscation using hexadecimal encoding. However, the matched file is a Go file, and the confidence level is low. Without stronger evidence, it's not possible to classify this package as malware.

google.golang.org/protobuf@v1.36.10Clean
Unverified
Analysed at: 12/28/25, 8:00 AM
Source: https://proxy.golang.org/google.golang.org%2fprotobuf/@v/v1.36.10.zip
SHA256: 9265fbe7d073ca8571f1a9c4b8e8f20b244c35ad913346892d688e58fe4b1f22
Confidence: Medium