registry / @antv/infographic / 0.2.20

@antv/infographic@0.2.20

⚠ Under review

An Infographic Generation and Rendering Framework, bring words to life!

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVars

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,036 file(s), 3.94 MB of source, external domains: assets.antv.antgroup.com, evilmartians.com, www.w3.org, www.w3ctech.com, www.weavefox.cn

Source & flagged code

1 flagged

dist/infographic.min.jsView file

5contains invisible/control Unicode U+200B (zero width space) \r!,./:;I[\\]ft ·ÌÍÎÏìíîïĨĪĬĮİıţŧƒƫƭǀǃǏǐȈȉȊȋͺ;΄΅·ΙΪ ․‧⁅⁆Ⅰ∖⋮`,682:"()-`r¡¨²³´¸¹ŕŗřȑȓ ‐‑“”„‟‹›⁃⁰⁴⁵⁶⁷⁸⁹⁺⁻⁼ⁿ₀₁₂₃₄₅₆₇₈₉₊₋₌",1024:"J_cksvxyz¯çýÿćĉċčĴķśŝşšŷźżžƙƛƨƶǩγλνϲ –‗‾ℎℏⅴⅹⅽ☇☈｡｢｣､･ｦｧｨｩｪｫｬｭｮｯｰｱｲｳｴｵｶｷｸｹｺｻｼｽｾｿﾀﾁﾂﾃﾄﾅﾆﾇﾈﾉﾊﾋﾌﾍﾎﾏﾐﾑﾒﾓﾔﾕﾖﾗﾘﾙﾚﾛﾜﾝﾞﾟﾠﾡﾢ

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/infographic.min.jsView on unpkg · L5

Source & flagged code

1 flagged · loading source

dist/infographic.min.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code