SafeDep
Install GitHub App

Summary

Only one low confidence YARA rule matched. Cannot classify as malware.

Verification Record

No verification record available.

Details

The YARA rule multi_decode_3 matched the file package/dist/emnapi-core.min.js. This rule detects multiple levels of decoding, which can be a sign of obfuscation used by malware. However, since there is only one YARA rule match, and the confidence is low, I cannot classify this package as malware. Obfuscation is also used legitimately to reduce the size of javascript files.

@emnapi/core@1.10.0Clean
Unverified
Analysed at: 4/16/26, 4:05 AM
Source: https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz
SHA256: 6834612073231f703a67aae5fa0192cef09748d634ba3701abe478988c28a720
Confidence: Medium