SafeDep
Install GitHub App

Summary

Embedded executable found. Extension mismatch reported. Insufficient evidence to classify as malware. Valid use cases exist for embedded binaries.

Verification Record

No verification record available.

Details

The package contains an embedded executable turbo-darwin-x64/bin/turbo, which is flagged by the 'Embedded Executable' rule. While this raises a flag, it is not sufficient to classify the package as malware without further evidence. The 'Extension Mismatch' rule also flags the same file. However, the confidence level for this rule is low. Without stronger evidence, I cannot confidently classify this as malware. There are valid use cases for embedding executables.

@turbo/darwin-64@2.9.6Clean
Unverified
Analysed at: 4/10/26, 1:21 PM
Source: https://registry.npmjs.org/@turbo/darwin-64/-/darwin-64-2.9.6.tgz
SHA256: 6e15b79ba08c0f3421673a4ceb5c9c68676c501e2426bf9067e83a95720068e8
Confidence: Medium