@8wave/ai-elements@0.95.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@8wave/ai-elements@0.95.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

dist/_chunks/index.es-DN8D4nRq.jsView file

177patternName = generic_password severity = medium line = 177 matchedText = return e..., e;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/_chunks/index.es-DN8D4nRq.jsView on unpkg · L177

dist-vue/_chunks/livescript-mG3hs7a-.jsView file

16return e.next(), "error"; L17: }, t = "(?![\\d\\s])[$\\w\\xAA-\\uFFDC](?:(?!\\s)[$\\w\\xAA-\\uFFDC]|-[A-Za-z])*", n = RegExp("(?:[({[=:]|[-~]>|\\b(?:e(?:lse|xport)|d(?:o|efault)|t(?:ry|hen)|finally|import(?:\\s*... L18: token: "string",

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-vue/_chunks/livescript-mG3hs7a-.jsView on unpkg · L16

dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2View file

•path = dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 kind = high_entropy_blob sizeBytes = 50216 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2View on unpkg

dist/_chunks/dist-PvBCQXAy.jsView file

•path = dist/_chunks/dist-PvBCQXAy.js kind = oversized_source_file sizeBytes = 2294275 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/_chunks/dist-PvBCQXAy.jsView on unpkg

dist/_chunks/iconify-D4alNs0B.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @8wave/ai-elements@0.91.0 matchedIdentity = npm:QDh3YXZlL2FpLWVsZW1lbnRz:0.91.0 similarity = 0.508 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/_chunks/iconify-D4alNs0B.jsView on unpkg

dist-vue/_chunks/index.es-BODtrBxv.jsView file

135patternName = generic_password severity = medium line = 135 matchedText = return e..., e;

Medium

Secret Pattern

Hardcoded password in dist-vue/_chunks/index.es-BODtrBxv.js

dist-vue/_chunks/index.es-BODtrBxv.jsView on unpkg · L135

dist-vue/locales.jsView file

221patternName = generic_password severity = medium line = 221 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist-vue/locales.js

dist-vue/locales.jsView on unpkg · L221

686patternName = generic_password severity = medium line = 686 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist-vue/locales.js

dist-vue/locales.jsView on unpkg · L686

Source & flagged code

8 flagged

dist/_chunks/index.es-DN8D4nRq.jsView file

Lines 157-197javascript

157 try {

158 return window.localStorage.getItem(""), D(e, t);

159 } catch (e) {

160 return w.warn("[useSafeLocalStorage] localStorage blocked, falling back to in-memory ref", e), g(t);

161 }

162}

163//#endregion

164//#region ../../packages/composable/src/useLocalizedString.ts

165e(), u();

166function ee(e, t) {

167 let { locale: n, t: r, te: i } = C({ useScope: "global" });

168 return p(() => {

169 let a = d(e), o = t !== void 0 && i(t) ? r(t) : void 0;

170 return a && a[n.value] || o;

171 });

172}

173//#endregion

174//#region ../../node_modules/.pnpm/@volverjs+form-vue@1.1.5_@volverjs+ui-vue@0.0.15_@volverjs+style@0.1.24_@vueuse+core@14_202c19c88dbb10743d339e13a87d99b8/node_modules/@volverjs/form-vue/dist/index.es.js

175e(), u(), m();

176var V = /* @__PURE__ */ function(e) {

177 return e.text = "text", e.number = "number", e.email = "email", e.password = "password", e.tel = "tel", e.url = "url", e.search = "search", e.date = "date", e.time

178}({}), H = /* @__PURE__ */ function(e) {

179 return e.invalid = "invalid", e.valid = "valid", e.submitting = "submitting", e.reset = "reset", e.updated = "updated", e.unknown = "unknown", e;

180}({}), te = (e) => e._def.typeName === "ZodObject", ne = (e) => e._zod.def.type === "object", re = (e) => e._def.typeName ===

181function q(e) {

182 let t = e;

183 for (; W(t);) t = t.innerType();

184 return t;

185}

186function J(e) {

187 let t = e;

188 for (; ue(t);) t = de(t._zod.def.out) ? t._zod.def.in : t._zod.def.out;

189 return t;

190}

191var fe = (e) => {

192 let t = q(e);

193 return G(t) && (t = t._def.innerType), t;

194}, pe = (e) => {

195 let t = J(e);

196 return K(t) && (t = t._zod.def.innerType), t;

197}, me = (e) => !!G(q(e)), he = (e) => !!K(J(e)), Y = (e) => "_zod"

Long lines were clipped for display.

dist-vue/_chunks/livescript-mG3hs7a-.jsView file

Lines 1-36javascript

1//#region ../../node_modules/.pnpm/@codemirror+legacy-modes@6.5.3/node_modules/@codemirror/legacy-modes/mode/livescript.js

2var e = function(e, t) {

3 var n = t.next || "start";

4

dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2View file

•path = dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 kind = high_entropy_blob sizeBytes = 50216 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2View on unpkg

dist/_chunks/dist-PvBCQXAy.jsView file

•path = dist/_chunks/dist-PvBCQXAy.js kind = oversized_source_file sizeBytes = 2294275 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/_chunks/dist-PvBCQXAy.jsView on unpkg

dist/_chunks/iconify-D4alNs0B.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @8wave/ai-elements@0.91.0 matchedIdentity = npm:QDh3YXZlL2FpLWVsZW1lbnRz:0.91.0 similarity = 0.508 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/_chunks/iconify-D4alNs0B.jsView on unpkg

dist-vue/_chunks/index.es-BODtrBxv.jsView file

Lines 115-155javascript

115 return e === void 0 ? n : e;

116}

117function F(e, t, n) {

118

dist-vue/locales.jsView file

Lines 201-241javascript

201 loadDelay: "Load Delay (ms)",

202 loaderStrategy: "Loader Strategy",

203 loaderStrategyInlineModule: "Inline Module",

204 loaderStrategyScriptSrc: "Script Src",

205 loaderStrategyDynamicImport