registry  /  @clerk/ui  /  1.25.3

@clerk/ui@1.25.3

Internal package that contains the UI components for the Clerk frontend SDKs

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1,516 file(s), 9.41 MB of source, external domains: accounts.google.com, api.mainnet-beta.solana.com, clerk.com, dashboard.clerk.com, fonts.googleapis.com, fonts.gstatic.com, github.com, go.clerk.com, img.clerk.com, img.clerkstage.dev, img.lclclerk.com, reactjs.org, schemas.xmlsoap.org, solana.com, solanamobile.com, stripe.com, www.w3.org

Source & flagged code

3 flagged · loading source
dist/ui-common_ui_8f1d83_1.25.3.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/ui-common_ui_8f1d83_1.25.3.jsView on unpkg · L1
dist/ui-common_ui_021ae8_1.25.3.jsView file
14patternName = generic_password severity = medium line = 14 matchedText = `}),(0,o...i7)`
Medium
Secret Pattern

Hardcoded password in dist/ui-common_ui_021ae8_1.25.3.js

dist/ui-common_ui_021ae8_1.25.3.jsView on unpkg · L14
dist/ui-common_ui_f79565_1.25.3.jsView file
14patternName = generic_password severity = medium line = 14 matchedText = `}),(0,o...i7)`
Medium
Secret Pattern

Hardcoded password in dist/ui-common_ui_f79565_1.25.3.js

dist/ui-common_ui_f79565_1.25.3.jsView on unpkg · L14

Findings

6 Medium4 Low
MediumSecret Patterndist/ui-common_ui_8f1d83_1.25.3.js
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/ui-common_ui_021ae8_1.25.3.js
MediumSecret Patterndist/ui-common_ui_f79565_1.25.3.js
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings