{"success":true,"data":{"ext":"xpi","name":"Mozilla Browser Archive","description":"Mozilla Browser Archive (XPI) is a package format created and maintained by Mozilla for distributing browser extensions and related add-ons. It is primarily used to install extensions, themes, and other components for Firefox and other Mozilla-based applications. Because XPI files can contain executable code and configuration data, they should be installed only from trusted sources; older add-on formats are now largely superseded by WebExtensions.","mime":["application/x-xpinstall"],"risk_level":"Safe","signatures":[{"hex":"50 4B 03 04","offset":0,"sources":[{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"},{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"50 4B 05 06","offset":0,"sources":[{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"}]},{"hex":"50 4B 07 08","offset":0,"sources":[{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"}]}],"related":[],"usage":{"python":"def is_xpi(file_path: str) -> bool:\n    \"\"\"Check if file is a valid XPI by magic bytes.\"\"\"\n    signature = bytes([0x50, 0x4B, 0x03, 0x04])\n    with open(file_path, \"rb\") as f:\n        return f.read(4) == signature","node":"function isXPI(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x50, 0x4B, 0x03, 0x04]);\n  return buffer.subarray(0, 4).equals(signature);\n}","go":"func IsXPI(data []byte) bool {\n    signature := []byte{0x50, 0x4B, 0x03, 0x04}\n    if len(data) < 4 {\n        return false\n    }\n    return bytes.Equal(data[:4], signature)\n}"}}}