registry / @alixpartners/ui-components / 2.6.2

@alixpartners/ui-components@2.6.2

A modern, reusable component library built with **[ReactJS](https://react.dev/)**.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEval

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 80 file(s), 1.92 MB of source, external domains: chaijs.com, example.com, foo.com, github.com, html.spec.whatwg.org, radix-ui.com, react.dev, reactjs.org, testing-library.com, testing-playground.com, vitest.dev, www.w3.org

Source & flagged code

3 flagged

dist/index-DkTDHhag.jsView file

Lines 305-345javascript

305function R(e) {

306 return e.hasAttribute("contenteditable") && (e.getAttribute("contenteditable") == "true" || e.getAttribute("contenteditable") == "");

307}

308function de(e) {

309 const t = un(e);

310 return t && (t.closest('[contenteditable=""]') || t.closest('[contenteditable="true"]'));

311}

312function un(e) {

313 return e.nodeType === 1 ? e : e.parentElement;

314}

315var gt = /* @__PURE__ */ (function(e) {

316 return e.button = "button", e.color = "color", e.file = "file", e.image = "image", e.reset = "reset", e.submit = "submit", e.checkbox = "checkbox", e.radio = "radio", e;

317})(gt || {});

318function vt(e) {

319 return a(e, "button") || a(e, "input") && e.type in gt;

320}

321function z(e) {

322 return mt(e) && !e.readOnly || R(e);

323}

324var yt = /* @__PURE__ */ (function(e) {

325 return e.text = "text", e.date = "date", e["datetime-local"] = "datetime-local", e.email = "email", e.month = "month", e.number = "number", e.password = "password", e.search = "search", e.tel = "tel", e.time = "time", e.url = "url", e.week

326})(yt || {});

327function mt(e) {

328 return a(e, "textarea") || a(e, "input") && e.type in yt;

329}

330function k(e) {

331 return Et(e) && mt(e);

332}

333function cn(e) {

334 return Et(e) && vt(e);

335}

336function Et(e) {

337 return e.nodeType === 1;

338}

339function dn(e) {

340 const t = e.ownerDocument.getSelection();

341 if (t != null && t.focusNode && k(e)) {

342 const i = de(t.focusNode);

343 if (i) {

344 if (!t.isCollapsed) {

345 var n;

Lines 438-478javascript

438function vn(e) {

439 const t = e.replace(/\D/g, "");

440 if (t.length < 2)

441 return e;

442 const n

dist/vi.bdSIJ99Y-017e_Pkz.jsView file

21230try { L21231: o = e, new Function("exports", o)(n); L21232: } catch {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vi.bdSIJ99Y-017e_Pkz.jsView on unpkg · L21230

Source & flagged code

3 flagged · loading source

dist/index-DkTDHhag.jsView file

325patternName = generic_password severity = medium line = 325 matchedText = return e..., e;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index-DkTDHhag.jsView on unpkg · L325

458patternName = generic_password severity = medium line = 458 matchedText = return e..., e;

Medium

Secret Pattern

Hardcoded password in dist/index-DkTDHhag.js

dist/index-DkTDHhag.jsView on unpkg · L458

dist/vi.bdSIJ99Y-017e_Pkz.jsView file

21230try { L21231: o = e, new Function("exports", o)(n); L21232: } catch {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vi.bdSIJ99Y-017e_Pkz.jsView on unpkg · L21230

Findings

3 Medium5 Low

MediumSecret Patterndist/index-DkTDHhag.js

MediumEnvironment Vars

MediumSecret Patterndist/index-DkTDHhag.js

LowScripts Present

LowEvaldist/vi.bdSIJ99Y-017e_Pkz.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/index-DkTDHhag.jsView file

Lines 305-345javascript

305function R(e) {

306 return e.hasAttribute("contenteditable") && (e.getAttribute("contenteditable") == "true" || e.getAttribute("contenteditable") == "");

307}

308function de(e) {

309 const t = un(e);

310 return t && (t.closest('[contenteditable=""]') || t.closest('[contenteditable="true"]'));

311}

312function un(e) {

313 return e.nodeType === 1 ? e : e.parentElement;

314}

315var gt = /* @__PURE__ */ (function(e) {

316 return e.button = "button", e.color = "color", e.file = "file", e.image = "image", e.reset = "reset", e.submit = "submit", e.checkbox = "checkbox", e.radio = "radio", e;

317})(gt || {});

318function vt(e) {

319 return a(e, "button") || a(e, "input") && e.type in gt;

320}

321function z(e) {

322 return mt(e) && !e.readOnly || R(e);

323}

324var yt = /* @__PURE__ */ (function(e) {

326})(yt || {});

327function mt(e) {

328 return a(e, "textarea") || a(e, "input") && e.type in yt;

329}

330function k(e) {

331 return Et(e) && mt(e);

332}

333function cn(e) {

334 return Et(e) && vt(e);

335}

336function Et(e) {

337 return e.nodeType === 1;

338}

339function dn(e) {

340 const t = e.ownerDocument.getSelection();

341 if (t != null && t.focusNode && k(e)) {

342 const i = de(t.focusNode);

343 if (i) {

344 if (!t.isCollapsed) {

345 var n;

Lines 438-478javascript

438function vn(e) {

439 const t = e.replace(/\D/g, "");

440 if (t.length < 2)

441 return e;

442 const n

dist/vi.bdSIJ99Y-017e_Pkz.jsView file

21230try { L21231: o = e, new Function("exports", o)(n); L21232: } catch {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vi.bdSIJ99Y-017e_Pkz.jsView on unpkg · L21230