registry / @agroshine/ags-web-i18n / 1.0.3

@agroshine/ags-web-i18n@1.0.3

AgroShine · traducciones compartidas y utilidades de i18n

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime behavior is limited to initializing i18next with bundled Spanish/English translation resources and exporting locale helpers.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package or calling createI18nConfig(opts)

Impact

No exfiltration, persistence, destructive behavior, or AI-agent control-surface mutation identified.

Mechanism

i18n resource initialization and translation utility exports

Rationale

Static inspection shows a normal shared i18n package; the suspicious strings are application translation labels and the prepare script is standard development/build tooling without packaged malicious payloads. No concrete attack behavior remains after source review.

Evidence

package.jsonREADME.mddist/index.jsdist/index.cjsdist/index.d.tsdist/index.d.cts

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json has a prepare script: husky install || true && tsup, but no packaged .husky files or custom installer code were present.

Evidence against

Package contains only package.json, README.md, and dist entry/type files.
dist/index.js and dist/index.cjs only import i18next/react-i18next and define locale utilities plus translation objects.
No child_process, fs writes, eval/vm/Function, dynamic import, native binaries, or credential harvesting found in packaged code.
Scanner secret hits are UI translation strings for password/reset-token labels, not embedded secrets.
No runtime network calls or package code endpoints found; URLs in package.json/README are registry/repository metadata.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 371 KB of source

Source & flagged code

4 flagged

dist/index.jsView file

Lines 1142-1182javascript

1142 table_columns_title_severity: "Severity",

1143 table_columns_title_resistance_to_control: "Resistance to control methods",

1144 table_columns_title_economic_impact: "Economic impact",

1145 table_columns_title_favorable_conditions: "Environmental conditions",

1146 table_columns_title_life_cycle: "Life cycle",

1147 table_columns_title_symptoms: "Symptoms",

1148 table_columns_title_control_methods: "Control methods",

1149 table_columns_title_regions_affected: "Affected regions",

1150 table_columns_title_associated_diseases: "Associated diseases",

1151 table_columns_title_references: "References"

1152};

1153

1154// src/locales/en/login.json

1155var login_default = {

1156 title: "Sign in to our platform",

1157 email_input_label: "Your email:",

1158 email_input_placeholder: "example@company.com",

1159 password_input_label: "Your password:",

1160 password_input_placeholder: "Password",

1161 accept: "Accept",

1162 lost_password: "Forgot your password?",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1162

1163 subtitle: "Access your AgroShine account to continue this week's operation.",

1164 session_inactive_alert: "Session closed due to inactivity. Sign in again to resume the W20 logbook.",

1165 show_password: "Show",

1166 hide_password: "Hide",

1167 layout: {

1168 eyebrow: "Floriculture operations SaaS",

1169 hero_title_prefix: "Your farm, in a single",

1170 hero_title_emphasis: "digital notebook",

1171 hero_description: "Health monitoring, spraying, planting, IoT, and post-harvest unified. Decisions based on events, not spreadsheets.",

1172 first_time: "First time here?",

1173 request_access: "Request access -",

1174 footer_version: "v1.0.0",

1175 footer_certifications: "SOC2 - ISO 27001",

1176 stats: {

1177 synced_blocks: "Synced blocks",

1178 order_compliance: "Order compliance",

1179 mix_efficiency: "Mix efficiency"

1180 }

1181 },

1182 errors: {

Lines 3014-3054javascript

3014 table_columns_title_severity: "Severidad",

3015 table_columns_title_resistance_to_control: "Resistencia a m\xE9todos de control",

3016 table_columns_title_economic_impact: "Impacto econ\xF3mico",

3017 table_columns_title_favorable_conditions: "Condiciones ambientales",

3018 table_columns_title_life_cycle: "Ciclo de vida",

3019 table_columns_title_symptoms:

dist/index.cjsView file

Lines 1147-1187javascript

1147 table_columns_title_severity: "Severity",

1148 table_columns_title_resistance_to_control: "Resistance to control methods",

1149 table_columns_title_economic_impact: "Economic impact",

1150 table_columns_title_favorable_conditions: "Environmental conditions",

1151 table_columns_title_life_cycle: "Life cycle",

1152 table_columns_title_symptoms

Source & flagged code

4 flagged · loading source

dist/index.jsView file

1162patternName = generic_password severity = medium line = 1162 matchedText = lost_pas...d?",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1162

3034patternName = generic_password severity = medium line = 3034 matchedText = lost_pas...a?",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L3034

dist/index.cjsView file

1167patternName = generic_password severity = medium line = 1167 matchedText = lost_pas...d?",

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L1167

3039patternName = generic_password severity = medium line = 3039 matchedText = lost_pas...a?",

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L3039

Findings

4 Medium3 Low

MediumSecret Patterndist/index.js

MediumSecret Patterndist/index.cjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

4 flagged

dist/index.jsView file

Lines 1142-1182javascript

1142 table_columns_title_severity: "Severity",

1143 table_columns_title_resistance_to_control: "Resistance to control methods",

1144 table_columns_title_economic_impact: "Economic impact",

1145 table_columns_title_favorable_conditions: "Environmental conditions",

1146 table_columns_title_life_cycle: "Life cycle",

1147 table_columns_title_symptoms: "Symptoms",

1148 table_columns_title_control_methods: "Control methods",

1149 table_columns_title_regions_affected: "Affected regions",

1150 table_columns_title_associated_diseases: "Associated diseases",

1151 table_columns_title_references: "References"

1152};

1153

1154// src/locales/en/login.json

1155var login_default = {

1156 title: "Sign in to our platform",

1157 email_input_label: "Your email:",

1158 email_input_placeholder: "example@company.com",

1159 password_input_label: "Your password:",

1160 password_input_placeholder: "Password",

1161 accept: "Accept",

1162 lost_password: "Forgot your password?",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1162

1163 subtitle: "Access your AgroShine account to continue this week's operation.",

1164 session_inactive_alert: "Session closed due to inactivity. Sign in again to resume the W20 logbook.",

1165 show_password: "Show",

1166 hide_password: "Hide",

1167 layout: {

1168 eyebrow: "Floriculture operations SaaS",

1169 hero_title_prefix: "Your farm, in a single",

1170 hero_title_emphasis: "digital notebook",

1171 hero_description: "Health monitoring, spraying, planting, IoT, and post-harvest unified. Decisions based on events, not spreadsheets.",

1172 first_time: "First time here?",

1173 request_access: "Request access -",

1174 footer_version: "v1.0.0",

1175 footer_certifications: "SOC2 - ISO 27001",

1176 stats: {

1177 synced_blocks: "Synced blocks",

1178 order_compliance: "Order compliance",

1179 mix_efficiency: "Mix efficiency"

1180 }

1181 },

1182 errors: {

Lines 3014-3054javascript

3014 table_columns_title_severity: "Severidad",

3015 table_columns_title_resistance_to_control: "Resistencia a m\xE9todos de control",

3016 table_columns_title_economic_impact: "Impacto econ\xF3mico",

3017 table_columns_title_favorable_conditions: "Condiciones ambientales",

3018 table_columns_title_life_cycle: "Ciclo de vida",

3019 table_columns_title_symptoms:

dist/index.cjsView file

Lines 1147-1187javascript

1147 table_columns_title_severity: "Severity",

1148 table_columns_title_resistance_to_control: "Resistance to control methods",

1149 table_columns_title_economic_impact: "Economic impact",

1150 table_columns_title_favorable_conditions: "Environmental conditions",

1151 table_columns_title_life_cycle: "Life cycle",

1152 table_columns_title_symptoms

Lines 3019-3059javascript

3019 table_columns_title_severity: "Severidad",

3020 table_columns_title_resistance_to_control: "Resistencia a m\xE9todos de control",

3021 table_columns_title_economic_impact: "Impacto econ\xF3mico",

3022 table_columns_title_favorable_conditions: "Condiciones ambientales",

3023 table_columns_title_life_cycle: "Ciclo de vida",

3024 table_columns_title_symptoms: "S\xEDntomas",

3025 table_columns_title_control_methods: "M\xE9todos de control",

3026 table_columns_title_regions_affected: "Regiones afectadas",

3027 table_columns_title_associated_diseases: "Enfermedades asociadas",

3028 table_columns_title_references: "Referencias"

3029};

3030

3031// src/locales/es/login.json

3032var login_default2 = {

3033 title: "Inicia sesi\xF3n en nuestra plataforma",

3034 email_input_label: "Tu correo electr\xF3nico:",

3035 email_input_placeholder: "ejemplo@empresa.com",

3036 password_input_label: "Su contrase\xF1a:",

3037 password_input_placeholder: "Contrase\xF1a",

3038 accept: "Aceptar",

3039 lost_password: "\xBFOlvidaste tu contrase\xF1a?",

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L3039

3040 subtitle: "Accede a tu cuenta de AgroShine para continuar la operaci\xF3n de la semana.",

3041 session_inactive_alert: "Sesi\xF3n cerrada por inactividad. Vuelve a ingresar para retomar la bit\xE1cora de W20.",

3042 show_password: "Ver",

3043 hide_password: "Ocultar",

3044 layout: {

3045 eyebrow: "SaaS de operaci\xF3n floricultora",

3046 hero_title_prefix: "Tu finca, en un solo",

3047 hero_title_emphasis: "cuaderno digital",

3048 hero_description: "Monitoreo sanitario, aspersiones, siembras, IoT y poscosecha unificados. Decisiones basadas en evento, no en planilla.",

3049 first_time: "\xBFPrimera vez aqu\xED?",

3050 request_access: "Solicitar acceso -",

3051 footer_version: "v1.0.0",

3052 footer_certifications: "SOC2 - ISO 27001",

3053 stats: {

3054 synced_blocks: "Bloques sincronizados",

3055 order_compliance: "Cumplimiento pedidos",

3056 mix_efficiency: "Eficacia mezcla"

3057 }

3058 },

3059 errors: {