Benign go Download

github.com/philsphicas/arcify v0.1.1-0.20260831100851-3615b5fab0b2

Action declares a main entrypointArchive could only be read in part (1 extraction problem)

SHA-2562e57ad2102abe21b9400256aa1c443b2af2d6e938dc551a3b9bd8b256179cc2f

URLhttps://proxy.golang.org/github.com/philsphicas/arcify/@v/v0.1.1-0.20260831100851-3615b5fab0b2.zip

MaleculeTh

Evidence

Code bundled with the ncc webpack runtime lines 2–12

2:38… 
3
4/***/ 9659:
5/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
6
7
8/* eslint-disable @typescript-eslint/no-explicit-any */
9var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
10    if (k2 === undefined) k2 = k;
11    var desc = Object.getOwnPropertyDescriptor(m, k);
12    if (!desc || ("get" in desc ? !m.__es …

HTTP POST method string literal lines 221–226

31…  void 0, void 0, function* () {
          return this.request('POST', requestUrl, data, additionalHeaders || {});
      });
  }
  patch(requestUrl, data, additionalHeaders) {
      return  …

Write data to HTTP request stream lines 445–457

9… });
      if (data && typeof data === 'string') {
          req.write(data, 'utf8');
      }
      if (data && typeof data !== 'string') {
⋯8 lines

Node TLS check disabled by option lines 627–634

18… .options = Object.assign(agent.options || {}, {
              rejectUnauthorized: false
          });
      }
⋯4 lines

GitHub token environment variable access lines 658–661

26… nt = userAgent || 'actions/http-client';
      const orchId = process.env['ACTIONS_ORCHESTRATION_ID'];
      if (orchId) {
          // Sanitize the orchestration ID to ensure it contains only vali …

No evidence locations were recorded for this file. Raw result