registry  /  @baishuyun/ai-design  /  1.2.3

@baishuyun/ai-design@1.2.3

AI 功能 UI 组件库 - 所有 AI 功能的 UI 表现唯一真相来源

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 367 file(s), 8.28 MB of source, external domains: chromatic.com, example.com, fb.me, github.com, html.spec.whatwg.org, images.unsplash.com, jedwatson.github.io, picsum.photos, radix-ui.com, react.dev, reactjs.org, storybook.js.org, testing-library.com, testing-playground.com, vercel.com, vitest.dev, www.chromatic.com, www.netlify.com, www.w3.org
Oversized source lightweight scan
storybook-static/sb-manager/globals-runtime.js3.01 MB file, sampled 256 KB
UrlStringsreactjs.orgwww.w3.org

Source & flagged code

8 flagged · loading source
storybook-static/assets/ui-B16ZxGB5.jsView file
4patternName = generic_password severity = medium line = 4 matchedText = url(data... t};
Medium
Secret Pattern

Package contains a possible secret pattern.

storybook-static/assets/ui-B16ZxGB5.jsView on unpkg · L4
storybook-static/vite-inject-mocker-entry.jsView file
17*/var ee;function qe(){if(ee)return v;ee=1;var r=Symbol.for("react.element"),e=Symbol.for("react.portal"),t=Symbol.for("react.fragment"),n=Symbol.for("react.strict_mode"),i=Symbol.... L18: `),n=t.findIndex(s=>s.includes(` at Object.${r}`)||s.includes(`${r}@`)),i=it(t[n+1]);return i?.file||""}const{now:se}=Date;class ct{constructor(e,t,n,i){x(this,"registry",new ce);x...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

storybook-static/vite-inject-mocker-entry.jsView on unpkg · L17
storybook-static/nunito-sans-bold-italic.woff2View file
•path = storybook-static/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

storybook-static/nunito-sans-bold-italic.woff2View on unpkg
storybook-static/sb-manager/globals-runtime.jsView file
•path = storybook-static/sb-manager/globals-runtime.js kind = oversized_source_file sizeBytes = 3152157 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

storybook-static/sb-manager/globals-runtime.jsView on unpkg
storybook-static/assets/iframe-BNpZCkNl.jsView file
339patternName = generic_password severity = medium line = 339 matchedText = `+t),t},...r"?`
Medium
Secret Pattern

Hardcoded password in storybook-static/assets/iframe-BNpZCkNl.js

storybook-static/assets/iframe-BNpZCkNl.jsView on unpkg · L339
dist/ai-design.jsView file
2941patternName = generic_password severity = medium line = 2941 matchedText = password...4;",
Medium
Secret Pattern

Hardcoded password in dist/ai-design.js

dist/ai-design.jsView on unpkg · L2941
dist/ai-design.umd.cjsView file
5patternName = generic_password severity = medium line = 5 matchedText = url(data...;/**
Medium
Secret Pattern

Hardcoded password in dist/ai-design.umd.cjs

dist/ai-design.umd.cjsView on unpkg · L5
src/const/ui.tsView file
91patternName = generic_password severity = medium line = 91 matchedText = password...4;',
Medium
Secret Pattern

Hardcoded password in src/const/ui.ts

src/const/ui.tsView on unpkg · L91

Findings

2 High10 Medium5 Low
HighShips High Entropy Blobstorybook-static/nunito-sans-bold-italic.woff2
HighOversized Source Filestorybook-static/sb-manager/globals-runtime.js
MediumSecret Patternstorybook-static/assets/ui-B16ZxGB5.js
MediumDynamic Requirestorybook-static/vite-inject-mocker-entry.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patternstorybook-static/assets/iframe-BNpZCkNl.js
MediumSecret Patterndist/ai-design.js
MediumSecret Patterndist/ai-design.umd.cjs
MediumSecret Patternsrc/const/ui.ts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings