@divkitframework/divkit: Suspicious npm security report (Warn)

Loading npm security reports…

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 5.50 MB of source, external domains: developer.mozilla.org, www.w3.org

Source & flagged code

13 flagged

dist/client.jsView file

Lines 1-19javascript

1"use strict";var Wd=Object.defineProperty;var Ud=(e,r,t)=>r in e?Wd(e,r,{enumerable:!0,configurable:!0,writable:!0,value:t}):e[r]=t;var Sr=(e,r,t)=>Ud(e,typeof r!="symbol"?r+"":r,t);/*!

2 DivKit v32.59.0

3 https://github.com/divkit/divkit

4 @licence Apache-2.0

5*/Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});function M(){}const Ns=e=>e;function Pi(e,r){for(const t in r)e[t]=

6`;for(let E=0;E<=1;E+=l){const A=r+(t-r)*o(E);u+=E*100+`%{${s(A,1-A)}}

7`}const f=u+`100% {${s(t,1-t)}}

8}`,d=`__svelte_${$d(f)}_${a}`,_=zf(e),{stylesheet:g,rules:b}=vs.get(_)||eh(_,e);b[d]||(b[d]=!0,g.insertRule(`@keyframes ${d} ${f}`,g.cssRules.length));const h=e.style.animation||"";return e.style.animation=`${h?`${h}, `:""}${d} ${n}ms linear ${i}ms 1 both`,ks+=1,d}function As(e,r){const t=(e.style.animation||"").split(", "),n=t.filter(r?o=>o.indexOf(r)<0:o=>o.indexOf("__svelte")===-1),i=t.length-n.length;i&&(e.style.animation=n.join(", "),ks-=i,ks||th())}function th(){Ll(()=>{ks||(vs.forEach(e=>{const{ownerNode:r}=e.stylesheet;r&&Q(r)}),vs.clear())})}let zo;function Po(e){zo=e}function Co(){if ...

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client.jsView on unpkg · L8

9`&&(ln=""),ln.length>gt&&(ln=t(9,Gt=Ae),ur instanceof HTMLInputElement&&(ur.value=ln)),Ae!==ln&&(p(ln)?(t(3

10 --> `+s+`

11`+l+` |

12`+o.line+" | "+u+`

13`+l+" | "+ul("",i.column-1," ")+ul("",d,"^")}else r+=`

14 at `+s}return r};Eo.buildMessage=function(e,r){var t={literal:function(u){return'"'+i(u.text)+'"'},class:function(u){var f=u.parts.map(function(d){return Array.isArray(d)?o(d[0])+"-"+o(d[1]):o(d)});return"["+(u.inverted?"^":"")+f.join("")+"]"},any:function(){return"any character"},end:function(){return"end of input"},other:function(u){return u.description}};function n(u){return u.charCodeAt(0).toString(16).toUpperCase()}function i(u){return u.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\0/g,"\\0").replace(/\t/g,"\\t").replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/[\x00-\x0F]/g,fun ...

15`],!1,!1),yt=function(p){return p},Ft=function(p){return ff(p)},_t=function(p){return p},Bt=function(){return""

16 transform: ${u} translate(${(1-h)*d}${_}, ${(1-h)*g}${b});

17 opacity: ${l-f*E}`}}const Qv="divkit-6d515",xv="divkit-8767a",$v="divkit-7481b",e2="divkit-60a10",t2="divkit-3133d",ws={root_platform_desktop:Qv,menu:xv,menu_visible:$v,menu__list:e2,menu__item:t2},{window:vf}=Si;function kf(e,r,t){const n=e.slice();return n[23]=r[t],n}function r2(e){let r=e[23].text+"",t;return{c(){t=di(r)},m(n,i){$(n,t,i)},p(n,i){i&1&&r!==(r=n[23].text+"")&&Ni(t,r)},d(n){n&&Q(t)}}}function Ef(e){let r,t,n,i;return t=new Gs({props:{componentContext:e[1],actions:e[23].actions||e[23].action&&[e[23].action],cls:ws.menu__item+" "+e[10],customAction:e[14],$$slots:{default:[r2]} ...

18//# sourceMappingURL=client.js.map

Long lines were clipped for display.

dist/esm/server.mjsView file

Lines 1611-1651javascript

1611 * 1) Doesn't take space as border does

1612 * 2) There should not be a border-radius on line breaks, but there should be a border

1613 */

1614 "box-shadow": Ke ? `inset 0 0 0 ${Te

dist/esm/client-devtool.mjsView file

18013patternName = generic_password severity = medium line = 18013 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client-devtool.mjs

dist/esm/client-devtool.mjsView on unpkg · L18013

dist/esm/client.mjsView file

15381patternName = generic_password severity = medium line = 15381 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client.mjs

dist/esm/client.mjsView on unpkg · L15381

dist/esm/client-hydratable.mjsView file

16469patternName = generic_password severity = medium line = 16469 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client-hydratable.mjs

dist/esm/client-hydratable.mjsView on unpkg · L16469

dist/client-devtool.jsView file

Lines 1-19javascript

1"use strict";var Xd=Object.defineProperty;var Zd=(e,r,t)=>r in e?Xd(e,r,{enumerable:!0,configurable:!0

dist/server.jsView file

Lines 1-14javascript

1"use strict";var Ql=Object.defineProperty;var ec=(r,t,e)=>t in r?Ql(r,t,{enumerable:!0,configurable:!0

dist/client-hydratable.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/client-hydratable.js

dist/client-hydratable.jsView on unpkg · L8

dist/browser/client.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client.js

dist/browser/client.jsView on unpkg · L8

dist/browser/client-devtool.jsView file

14patternName = generic_password severity = medium line = 14 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client-devtool.js

dist/browser/client-devtool.jsView on unpkg · L14

dist/browser/client-hydratable.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client-hydratable.js

dist/browser/client-hydratable.jsView on unpkg · L8

Source & flagged code

13 flagged · loading source

dist/client.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

@divkitframework/divkit: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged

dist/client.jsView file

Lines 1-19javascript

1"use strict";var Wd=Object.defineProperty;var Ud=(e,r,t)=>r in e?Wd(e,r,{enumerable:!0,configurable:!0,writable:!0,value:t}):e[r]=t;var Sr=(e,r,t)=>Ud(e,typeof r!="symbol"?r+"":r,t);/*!

2 DivKit v32.59.0

3 https://github.com/divkit/divkit

4 @licence Apache-2.0

5*/Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});function M(){}const Ns=e=>e;function Pi(e,r){for(const t in r)e[t]=

6`;for(let E=0;E<=1;E+=l){const A=r+(t-r)*o(E);u+=E*100+`%{${s(A,1-A)}}

7`}const f=u+`100% {${s(t,1-t)}}

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client.jsView on unpkg · L8

9`&&(ln=""),ln.length>gt&&(ln=t(9,Gt=Ae),ur instanceof HTMLInputElement&&(ur.value=ln)),Ae!==ln&&(p(ln)?(t(3

10 --> `+s+`

11`+l+` |

12`+o.line+" | "+u+`

13`+l+" | "+ul("",i.column-1," ")+ul("",d,"^")}else r+=`

15`],!1,!1),yt=function(p){return p},Ft=function(p){return ff(p)},_t=function(p){return p},Bt=function(){return""

16 transform: ${u} translate(${(1-h)*d}${_}, ${(1-h)*g}${b});

18//# sourceMappingURL=client.js.map

Long lines were clipped for display.

dist/esm/server.mjsView file

Lines 1611-1651javascript

1611 * 1) Doesn't take space as border does

1612 * 2) There should not be a border-radius on line breaks, but there should be a border

1613 */

1614 "box-shadow": Ke ? `inset 0 0 0 ${Te

dist/esm/client-devtool.mjsView file

18013patternName = generic_password severity = medium line = 18013 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client-devtool.mjs

dist/esm/client-devtool.mjsView on unpkg · L18013

dist/esm/client.mjsView file

15381patternName = generic_password severity = medium line = 15381 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client.mjs

dist/esm/client.mjsView on unpkg · L15381

dist/esm/client-hydratable.mjsView file

16469patternName = generic_password severity = medium line = 16469 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/esm/client-hydratable.mjs

dist/esm/client-hydratable.mjsView on unpkg · L16469

dist/client-devtool.jsView file

Lines 1-19javascript

1"use strict";var Xd=Object.defineProperty;var Zd=(e,r,t)=>r in e?Xd(e,r,{enumerable:!0,configurable:!0

dist/server.jsView file

Lines 1-14javascript

1"use strict";var Ql=Object.defineProperty;var ec=(r,t,e)=>t in r?Ql(r,t,{enumerable:!0,configurable:!0

dist/client-hydratable.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/client-hydratable.js

dist/client-hydratable.jsView on unpkg · L8

dist/browser/client.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client.js

dist/browser/client.jsView on unpkg · L8

dist/browser/client-devtool.jsView file

14patternName = generic_password severity = medium line = 14 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client-devtool.js

dist/browser/client-devtool.jsView on unpkg · L14

dist/browser/client-hydratable.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = }`,d=`__...===`

Medium

Secret Pattern

Hardcoded password in dist/browser/client-hydratable.js

dist/browser/client-hydratable.jsView on unpkg · L8

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code