SafeDep
Install GitHub App

Summary

Embedded executable found. Legitimate uses exist. Insufficient evidence to classify as malware.

Verification Record

No verification record available.

Details

The package contains an embedded executable named turbo-darwin-arm64/bin/turbo. While this raises a security concern, there are legitimate reasons for embedding executables. The extension mismatch is a low confidence signal. Without stronger evidence, it's not possible to classify this package as malware.

@turbo/darwin-arm64@2.9.6Clean
Unverified
Analysed at: 4/10/26, 1:22 PM
Source: https://registry.npmjs.org/@turbo/darwin-arm64/-/darwin-arm64-2.9.6.tgz
SHA256: 21c35f5cb26f5e8e9e2eb138183be034863d713fe5ea2ad62454226b01bfaa75
Confidence: Medium