{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00001670917,
        "rte": "az",
        "prob": 0.00001670917
      },
      {
        "cls": 0,
        "raw": 0.0016794404,
        "rte": "az/npm",
        "prob": 0.0016794404
      }
    ],
    "prob": 0.00001670917,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016709169358364306,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011831521987915039,
        "type": "elf"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010093052878801245,
        "type": "package.json"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010132789611816406,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-13T04:28:40Z"
  },
  "path": "@muthuishere-crossmem-linux-arm64-0.1.10.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "H(Po)",
        "sha": "26be52a491c92d15c1874af94b628b988498737ba7f248aa2a92d941d4a4bcd5",
        "path": "@muthuishere-crossmem-linux-arm64-0.1.10.tgz",
        "refs": [
          {
            "to": "pkg:github/muthuishere/crossmemcli",
            "off": 0,
            "kind": "repository"
          }
        ],
        "risk": 2,
        "size": 2873574,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 2873574,
              "entropy": 7.98
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 2865152,
              "peak_region_entropy": 7.85
            },
            "consistency": {
              "name_repo_mismatch": 1
            }
          }
        },
        "ident": {
          "name": {
            "value": "@muthuishere/crossmem-linux-arm64",
            "source": "npm.name",
            "verified": false
          },
          "urls": [
            {
              "url": "git+https://github.com/muthuishere/crossmemcli.git",
              "kind": "repository",
              "source": "npm.repository.url"
            }
          ],
          "trust": "unsigned",
          "version": {
            "value": "0.1.10",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "@muthuishere/crossmem-linux-arm64",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/arch/arm64::arm64-elf",
            "conf": 1.0,
            "crit": 2,
            "desc": "ARM64/AArch64 ELF binary"
          },
          {
            "id": "objectives/anti-static/obfuscation/control-flow/logic::svc-hex-pattern",
            "conf": 0.3,
            "crit": 2,
            "desc": "ARM64 svc instruction sequence",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/process/fork/clone::fork-syscall",
            "conf": 0.8,
            "crit": 3,
            "desc": "Process creation via fork syscall",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "\u0026$BYN\u003cqgll*Ydo\u00260000000000\u003eM:xG\u00260R*C\u0026swiH\u0026UaPM\u0026$\u003c#R\u003cqQwW\u003cSu+-0rrbHan!vd\u0026@x6U1or$n\u003crBW2%0E*x?#-#5\u002641*6ZYN@{\u00263el$\u0026u[T3%0[9BZYN@{KpatH%6)+GnHKNr@TP\u003ev@EVi!@uzr\u0026\u002670!y\u0026.GNI\u0026%kT(E/]=wFcM6Nkl7/KPALr{3K3I",
            "ln": 35004
          },
          {
            "b": "0rrbH\u00264\u003ewzZYN@{0000000000\u00260U7C\u0026r}{D(jleQ(K#LV(\u003e.}.dU5Sod/ZW^epX/pn$7pUdGyK+H-p()0rrbH9@)zGu\u0026Qga\u00264\u003ewzZYN@{(h$w/k:)kKuJye)u\u0026Qga?#+730002{neu:70rrbH)1nTt(JpI?(vSEsuJye%ZYjvlE/PMtFb/NGkQuBay8E3E}#Wtb?#:y/002mm\u00260\u003eimS0!d70rrbH@@r0m\u00260hKy\u0026r}{DH.b9+0rrbHan!t",
            "ln": 480780
          },
          {
            "b": "ayYFhwnC*/aAIsjy?%C3at2fNxjU$5B08OFarR^HarR^HarR^HarR^HarR^HarR^HarR^HayP8czY\u003cdgA+w%9aBU%@vp%d?BAo9RyIvQ3B0bWuwO@S2z!9B7azC)tzu",
            "ln": 3825607
          },
          {
            "b": "B-^Y:QCB+b%nO\u0026Ig=km.0d+910u=(yFpF7o%9(exaARgoBo2V4e?O+fiA*.euOB8+e?Yj*Drrauq+x!}gbi\u0026I0dYp]FoS?8flZ5DgfNsvk(=cfbRZLAbSc?EA=l8rwof)lA=l8rwof)WBTc@jh6:F?b}ZV*bMG8FbMG8FbQEHTe?g]/0cAd4AbYxe0cAc}z*b=k06$WEwPv",
            "ln": 3840241
          },
          {
            "b": "Bz\u0026oOfd{:Pz/Y#pwO\u003c8uvj(qoz/fv#v@=HeB8tG9azCXiz/P}xe*8.$x(k5xfjO{rC4CYnvruj4zGvEJvj(qoz/fwleIg*JA+w@aeIgHNC}B5Vzvf=Vu\u003cWlGeIgWOu)6q{C{3NcaARpdayGg$e]2DCzFSY6w[=6)aA8oyvix8{A+e:5z/QaCBzb98ay/tcByw)3B0byswIb9k",
            "ln": 3843178
          },
          {
            "b": "zdNMbwQ5fjA=+XifcBUjA=l2uzdNMbx(d*cA=+XiD(#*qwObH]wO#0?B1.GJA=+-0x(4H9C}J@Au)6?7D(%R8BrC74zyoJGw[=c[az(xDB7GAlx(v)ga%qmQu$jj}B8#hfz6i[fvqYE7aARpdzxJCczF0P}aBCqtA+e\u0026]A+fb#wPGIDA=l8fy?mW3z/o-izF7OswmcKc3vA%}zY\u0026?k",
            "ln": 3848819
          },
          {
            "b": "B.\u003eSgaBCqtv@=HeB8tG9azk?9A+6i0x(4\u0026ke)]/Hav*M.A+6i0x(4\u0026wayX[#z*9sK3jn15axi2=az+$8wftG2z*9rLBzbkdxM4#nAa9\u003c4dgczidNv({vr(]pB7/GoaARpdazbLdwmY^eB0bKnB8#5lzGu}ezE:(lvqf*aw]zYjvix5#zF0Q6z6iq0w]v",
            "ln": 3849011
          },
          {
            "b": "ash7KpF%OHqxOqeaAzyAx\u003edi=z/l+nvqZuky?m^3y\u0026Z.qw/#hox\u003eI6\u0026AV/ylv%8*kx(v\u003e?x(n3h0b)14aA7\u0026(v{%m)z/^aixKL^\u003ewGSpuaA}mgaz(4cwGUP9z/3Rvx([35zxJvgBAg/cB75N2x(v\u003e?wmoN*vQTs?aAR43y?j-6B0bpqv@2T^iV].\u002609iJAB.alXB94yl",
            "ln": 3859901
          },
          {
            "b": "zy]vpzGx]dzGE1iwObv[y\u0026/U!vqY$3BrC15wftq6q=DK\u003cmmnndz!%Mkzu9Wkl{T^var\u0026aQa$^}Ry?X05uU%j)By/Fnq:\u003cUdB8=1sjS[Y:x(n38c){q!e*U4HefDq\u003eB8=1BaBFLVb#C!jD)0GMvSMTid06xAehnU\u003ewO#d5xEE?ux(n38c){q!e*U4HcOfsUy:*!ZaxI95qBIZID2NsqjS(a]vpB4:cM\u003eX",
            "ln": 3864101
          },
          {
            "b": "z/^asz!9M]C{1zOayX[(vrDT5azC{ux(+z9aA?EgCk#V4Cxj)qwO+}1wN\u003e^PzGGD5wPw]iC4CYay\u0026sH$b{s(\u003cw=LH@ogo$wAV^\u003eCpElgyvruQ5A=91wz/l+dz/6DfwQ1hzq:S\u0026EmiDe^Ab]JhB7]Mgaz(mxBrC47ayMylx(mN1wGUF@vrb^^By/E)b{s@{f/rOzb{s@{gb9ntb{Mm!b#BURzGYD8x\u003eet^zFrO",
            "ln": 3869076
          }
        ],
        "depth": 1,
        "facts": {
          "sec": [
            [
              ".text",
              4096,
              3344324,
              6.41,
              "alloc,executable"
            ],
            [
              ".rodata",
              3407872,
              954737,
              4.52,
              "alloc"
            ],
            [
              ".typelink",
              4362624,
              4812,
              4.74,
              "alloc"
            ],
            [
              ".itablink",
              4367456,
              744,
              2.52,
              "alloc"
            ],
            [
              ".gopclntab",
              4368224,
              2177552,
              5.79,
              "alloc"
            ],
            [
              ".go.buildinfo",
              6553600,
              1584,
              5.89,
              "write,alloc"
            ],
            [
              ".go.fipsinfo",
              6555200,
              120,
              4.45,
              "write,alloc"
            ],
            [
              ".noptrdata",
              6555328,
              163841,
              5.55,
              "write,alloc"
            ],
            [
              ".data",
              6719200,
              43698,
              1.74,
              "write,alloc"
            ],
            [
              ".note.gnu.build-id",
              4060,
              36,
              4.08,
              "alloc"
            ],
            [
              ".note.go.buildid",
              3960,
              100,
              5.26,
              "alloc"
            ],
            [
              ".shstrtab",
              6815744,
              184,
              4.19,
              ""
            ]
          ],
          "metrics": {
            "elf": {
              "bits": 64,
              "entry": 544256,
              "has_got": 0,
              "has_plt": 0,
              "has_note": 1,
              "note_count": 1,
              "nx_enabled": 1,
              "dynrel_count": 0,
              "dynsym_count": 0,
              "has_eh_frame": 0,
              "no_gnu_stack": 0,
              "symtab_count": 0,
              "dynrela_count": 0,
              "little_endian": 1,
              "pltreloc_count": 0,
              "executable_stack": 0,
              "wx_segment_count": 0,
              "direct_syscall_count": 37,
              "program_header_count": 6,
              "stripped_with_symtab": 0,
              "load_segment_max_file_size": 3348420,
              "load_segment_max_memory_size": 3348420,
              "section_relocation_group_count": 0,
              "stripped_metadata_section_count": 8
            },
            "file": {
              "size": 6815928,
              "entropy": 6.18
            },
            "binary": {
              "is_pie": 0,
              "is_stripped": 1,
              "code_entropy": 6.41,
              "data_entropy": 4.76,
              "string_count": 12503,
              "entropy_variance": 1.72,
              "avg_string_length": 33.99,
              "max_string_length": 6711,
              "peak_region_bytes": 19456,
              "code_to_data_ratio": 0.94,
              "peak_region_entropy": 8,
              "string_length_stddev": 79.45,
              "largest_section_ratio": 0.49,
              "sentence_string_count": 1219,
              "sentence_string_ratio": 0.1,
              "high_entropy_string_count": 2
            },
            "sections": {
              "count": 16,
              "code_size": 3344324,
              "entropy_max": 6.41,
              "entropy_mean": 4.6,
              "name_entropy": 4.07,
              "writable_count": 6,
              "executable_count": 1,
              "nonstandard_count": 11,
              "executable_writable_count": 0
            },
            "dependencies": {
              "count": 0
            }
          }
        },
        "id": 1,
        "mol": "H(Po)",
        "path": "@muthuishere-crossmem-linux-arm64-0.1.10.tgz!!package/bin/crossmem",
        "pid": 0,
        "risk": 2,
        "sha": "adf4f64d6eff1a042dadffac824481267cde18228e000ba6cf8940062c03476a",
        "size": 6815928,
        "traits": [
          {
            "id": "metadata/arch/arm64::arm64-elf",
            "conf": 1.0,
            "crit": 2,
            "desc": "ARM64/AArch64 ELF binary"
          },
          {
            "id": "objectives/anti-static/obfuscation/control-flow/logic::svc-hex-pattern",
            "conf": 0.3,
            "crit": 2,
            "desc": "ARM64 svc instruction sequence",
            "spans": [
              [
                35052,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/fork/clone::fork-syscall",
            "conf": 0.8,
            "crit": 3,
            "desc": "Process creation via fork syscall",
            "spans": [
              [
                480844,
                7
              ]
            ]
          }
        ],
        "type": "elf"
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb0Z0/Bzb/hB7/c9wImLlz/Y#pwO\u003c2nx(n6reN-Wphz=Qe3lQDnC4CYnx(v(kiV]R2e?[$kfD@4ParR\u003eswPIv4x(Ffdz/c:War\u003eroz/Y#pwO\u0026MeA+eZ5x(4(lvRGZ*A^n^tz/M$px(n6reN-Wphz=Qe3lQDnA+fidB7]-mA^n\u0026\u0026ao",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 393,
              "entropy": 4.6
            },
            "binary": {
              "peak_region_bytes": 393,
              "peak_region_entropy": 4.6
            },
            "consistency": {
              "name_repo_mismatch": 1
            }
          }
        },
        "id": 2,
        "path": "@muthuishere-crossmem-linux-arm64-0.1.10.tgz!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "pkg:github/muthuishere/crossmemcli",
            "off": 182,
            "kind": "repository"
          }
        ],
        "risk": 1,
        "sha": "cd224e2c59e2991f5dce8b0a232b233faec3c85310b5664c0658c57ec20521f1",
        "size": 393,
        "traits": [
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          }
        ],
        "type": "package.json"
      },
      {
        "ctx": [
          {
            "b": "DM)3hz/ZhBBy/qkiWeDXz6yIPzEEx[b03]kzfo@lB.L]gwPzunv@=HeB8tG9eO]csB:bGDA=0Y\u003ea$K{YwPz\u003caz/c:Wa$$S7e?]47efY4QvR/+1xK$ZYvrrXOf/I6LgbyZugbQQbvp%dUwmo+8b04zeb5yXfwPI%2C4CYnx(v(kiWcmgf!Lgma$K{DB-.qn",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 929,
              "entropy": 4.85
            },
            "binary": {
              "peak_region_bytes": 929,
              "peak_region_entropy": 4.85
            },
            "registry": {
              "age_days": 0,
              "file_count": 2,
              "maintainers": 1,
              "published_at": 1789233025,
              "releases_24h": 2,
              "releases_48h": 2,
              "is_deprecated": 0,
              "release_count": 10,
              "security_hold": 0,
              "unpacked_size": 6816321,
              "version_removed": 0,
              "downloads_recent": 63,
              "package_age_days": 75,
              "first_published_at": 1782721105,
              "has_install_script": 0,
              "previous_published_at": 1789218535,
              "publisher_in_maintainers": 0,
              "days_since_previous_release": 0
            }
          }
        },
        "id": 3,
        "mol": "Md(Re)",
        "path": "@muthuishere_crossmem-linux-arm64@0.1.10.registry.json",
        "pid": 2,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "0da517d3dac2e7cc542cb235ec61185817821588a5f991a4d6230b3d466229dc",
        "size": 929,
        "supp": [
          {
            "by": [
              {
                "id": "metadata/registry::github-actions-publisher"
              }
            ],
            "id": "metadata/registry::publisher-not-maintainer",
            "crit": "notable",
            "kind": "unless"
          }
        ],
        "traits": [
          {
            "id": "metadata/registry::github-actions-publisher",
            "conf": 1.0,
            "crit": 3,
            "desc": "Registry publisher is GitHub Actions"
          },
          {
            "id": "metadata/registry::freshly-published",
            "conf": 1.0,
            "crit": 3,
            "desc": "Release published within seven days",
            "spans": [
              [
                0,
                24
              ]
            ]
          }
        ],
        "type": "registry"
      }
    ],
    "v": "8"
  }
}