registry / @antimatter-audio/antimatter-ui / 16.5.8

@antimatter-audio/antimatter-ui@16.5.8

React UI component library for Antimatter Audio.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 359 KB of source, external domains: www.w3.org

Source & flagged code

1 flagged

dist/index.jsView file

Lines 501-541javascript

501 const numericWidth = getNumericValue(width);

502 const numericHeight = getNumericValue(height);

503 const numericBorderWidth = getNumericValue(borderWidth);

504 const stringWidth = getStringSizeValue(width);

505 const stringHeight = getStringSizeValue(height);

506 return jsx("svg", {

507 width: stringWidth,

508 height: stringHeight,

509 style: {

510 position: 'absolute',

511 zIndex: -1,

512 top: 0,

513 bottom: 0,

514 right: 0,

515 left: 0,

516 filter: generateDropShadowFilterString(outerGlowColors, outerGlowRadius),

517 ...style

518 },

519 ...rest,

520 vectorEffect: "non-scaling-stroke",

521 shapeRendering: "crispEdges",

522 xmlns: "http://www.w3.org/2000/svg",

523 children: jsx("polygon", {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L521

524 points: `${cornerBevel[0] + numericBorderWidth},${numericBorderWidth}

525 ${numericWidth - cornerBevel[1] - numericBorderWidth},${numericBorderWidth}

526 ${numericWidth - numericBorderWidth},${cornerBevel[1] + numericBorderWidth}

527 ${numericWidth - numericBorderWidth},${numericHeight - cornerBevel[2] - numericBorderWidth}

528 ${numericWidth - cornerBevel[2] - numericBorderWidth},${numericHeight - numericBorderWidth}

529 ${cornerBevel[3] + numericBorderWidth},${numericHeight - numericBorderWidth}

530 ${numericBorderWidth}, ${numericHeight - cornerBevel[3] - numericBorderWidth}

531 ${numericBorderWidth}, ${cornerBevel[0] + numericBorderWidth}`,

532 onMouseEnter: ()=>setComponentIsHovered(true),

533 onMouseLeave: ()=>setComponentIsHovered(false),

534 fill: componentIsHovered ? highlightFillColor : fillColor,

535 stroke: borderColor,

536 vectorEffect: "non-scaling-stroke",

537 shapeRendering: "crispEdges",

538 strokeWidth: numericBorderWidth

539 })

540 });

541}

Source & flagged code

1 flagged · loading source

dist/index.jsView file

521shapeRendering: "crispEdges", L522: xmlns: "http://www.w3.org/2000/svg", L523: children: jsx("polygon", { ... L3397: if (eventId) { L3398: fetch(Juce.getBackendResourceAddress(`${eventId}.json`)).then((response)=>response.text()).then((text)=>{ L3399: const data = JSON.parse(text); ... L4702: fillGradient: fillGradient, L4703: data: data, L4704: xScale: xScale,

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L521

Findings

1 High1 Medium3 Low

HighBase64 Obscured Urldist/index.js

MediumNetwork

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings