Loading npm security reports…
Allowed — no malicious behavior detected
No malicious behavior detected. 50 low-signal pattern(s) reviewed.
@eifi1/ui-kit@0.32.2
⚠ Under reviewApp-agnostic shared design system: domain-free React components, theme and tokens.
Static Scan Results
scanned 27d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
Supply chainHighEntropyStringsTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 620 file(s), 7.03 MB of source, external domains: kit.invalid, www.w3.org
Source & flagged code
44 flagged21patternName = generic_password
severity = medium
line = 21
MediumSecret Pattern
Package contains a possible secret pattern.
dist/auth/sign-in-form.jsView on unpkg · L21 src/i18n/kit-labels.tsx#virtual:normalized:round1View file •stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/i18n/kit-labels.tsx#virtual:normalized:round1View on unpkg Findings
1 High44 Medium5 Low
HighSemantic Analysis Limitedsrc/i18n/kit-labels.tsx#virtual:normalized:round1
MediumSecret Patterndist/auth/sign-in-form.js
MediumNetwork
MediumSecret Patterndist/auth/register-form.js
MediumSecret Patterndist/account/email-change-setting.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/fr.js
Affected versions and remediation
This report applies to @eifi1/ui-kit@0.32.2.
See all versions of @eifi1/ui-kit for other recorded verdicts.
- Review the evidence and your use of @eifi1/ui-kit@0.32.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
25patternName = generic_password
severity = medium
line = 25
MediumSecret Pattern
Hardcoded password in dist/auth/register-form.js
dist/auth/register-form.jsView on unpkg · L25 dist/account/email-change-setting.jsView file 19patternName = generic_password
severity = medium
line = 19
MediumSecret Pattern
Hardcoded password in dist/account/email-change-setting.js
dist/account/email-change-setting.jsView on unpkg · L19 164patternName = generic_password
severity = medium
line = 164
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L164 406patternName = generic_password
severity = medium
line = 406
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L406 709patternName = generic_password
severity = medium
line = 709
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L709 826patternName = generic_password
severity = medium
line = 826
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L826 869patternName = generic_password
severity = medium
line = 869
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L869 975patternName = generic_password
severity = medium
line = 975
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L975 165patternName = generic_password
severity = medium
line = 165
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L165 411patternName = generic_password
severity = medium
line = 411
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L411 717patternName = generic_password
severity = medium
line = 717
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L717 834patternName = generic_password
severity = medium
line = 834
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L834 880patternName = generic_password
severity = medium
line = 880
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L880 990patternName = generic_password
severity = medium
line = 990
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L990 166patternName = generic_password
severity = medium
line = 166
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L166 410patternName = generic_password
severity = medium
line = 410
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L410 719patternName = generic_password
severity = medium
line = 719
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L719 840patternName = generic_password
severity = medium
line = 840
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L840 884patternName = generic_password
severity = medium
line = 884
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L884 991patternName = generic_password
severity = medium
line = 991
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L991 165patternName = generic_password
severity = medium
line = 165
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L165 715patternName = generic_password
severity = medium
line = 715
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L715 987patternName = generic_password
severity = medium
line = 987
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L987 165patternName = generic_password
severity = medium
line = 165
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L165 408patternName = generic_password
severity = medium
line = 408
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L408 712patternName = generic_password
severity = medium
line = 712
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L712 827patternName = generic_password
severity = medium
line = 827
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L827 870patternName = generic_password
severity = medium
line = 870
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L870 976patternName = generic_password
severity = medium
line = 976
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L976 170patternName = generic_password
severity = medium
line = 170
417patternName = generic_password
severity = medium
line = 417
726patternName = generic_password
severity = medium
line = 726
839patternName = generic_password
severity = medium
line = 839
884patternName = generic_password
severity = medium
line = 884
996patternName = generic_password
severity = medium
line = 996
185patternName = generic_password
severity = medium
line = 185
MediumSecret Pattern
Hardcoded password in src/auth/sign-in-form.tsx
src/auth/sign-in-form.tsxView on unpkg · L185 91patternName = generic_password
severity = medium
line = 91
MediumSecret Pattern
Hardcoded password in src/auth/register-form.tsx
src/auth/register-form.tsxView on unpkg · L91 src/account/email-change-setting.tsxView file 70patternName = generic_password
severity = medium
line = 70
MediumSecret Pattern
Hardcoded password in src/account/email-change-setting.tsx
src/account/email-change-setting.tsxView on unpkg · L70 202patternName = generic_password
severity = medium
line = 202
454patternName = generic_password
severity = medium
line = 454
773patternName = generic_password
severity = medium
line = 773
885patternName = generic_password
severity = medium
line = 885
Medium
Secret Pattern
dist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patternsrc/auth/sign-in-form.tsx
MediumSecret Patternsrc/auth/register-form.tsx
MediumSecret Patternsrc/account/email-change-setting.tsx
MediumSecret Patternsrc/i18n/german.ts
MediumSecret Patternsrc/i18n/german.ts
MediumSecret Patternsrc/i18n/german.ts
MediumSecret Patternsrc/i18n/german.ts
LowNon Install Lifecycle Scripts
prepublishOnly
Behavioral surface
NetworkHighEntropyStringsTelemetryUrlStringsManifest: clean