registry  /  @erpsquad/common  /  1.9.72-lawfirm

@erpsquad/common@1.9.72-lawfirm

Shared UI component library for ERP modules

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 128 file(s), 17.8 MB of source, external domains: ak.picdn.net, bugs.webkit.org, ckeditor.com, erpforce-dev.s3.eu-west-1.amazonaws.com, example.com, fb.me, fullcalendar.io, github.com, mathiasbynens.be, mths.be, mui.com, picsum.photos, popper.js.org, prosemirror.net, redux.js.org, vecta.io, www.google-analytics.com, www.w3.org
Oversized source lightweight scan
dist/SectionFlowEditor-87TkkUOn.esm.js2.54 MB file, sampled 256 KB
EnvironmentVarsHighEntropyStringsUrlStringsexample.comgithub.comwww.w3.org
dist/custom-editor-B-nJj0EX.esm.js2.86 MB file, sampled 256 KB
ChildProcessHighEntropyStringsUrlStringsckeditor.comwww.w3.org

Source & flagged code

7 flagged · loading source
dist/constants/index.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...e=_;
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/constants/index.jsView on unpkg · L1
dist/article-cell-editor-JDI676YI-C2BoypWr.jsView file
4/* @__PURE__ */function(){return function t(e){if(!(this instanceof t))throw new TypeError("Cannot call a class as a function.");if(!arguments.length)throw new TypeError("1 argumen... L5: return(new Date).getTime()-t>6048e5}(a)||(window.localStorage.setItem(i,/* @__PURE__ */(new Date).getTime()),setTimeout(function(){"interactive"!==document.readyState&&"complete"!=... L6: return o.createElement(zy,{id:"markdown-wysiwyg",onKeyDown:r},/* @__PURE__ */o.createElement(qy,{initialEditType:"wysiwyg",autofocus:!0,initialValue:t.value.data.markdown,hideModeS...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/article-cell-editor-JDI676YI-C2BoypWr.jsView on unpkg · L4
dist/custom-editor-B-nJj0EX.esm.jsView file
•path = dist/custom-editor-B-nJj0EX.esm.js kind = oversized_source_file sizeBytes = 2998854 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/custom-editor-B-nJj0EX.esm.jsView on unpkg
dist/constants/index.esm.jsView file
37patternName = generic_password severity = medium line = 37 matchedText = change_p...rd",
Medium
Secret Pattern

Hardcoded password in dist/constants/index.esm.js

dist/constants/index.esm.jsView on unpkg · L37
114patternName = generic_password severity = medium line = 114 matchedText = reset_pa...rd",
Medium
Secret Pattern

Hardcoded password in dist/constants/index.esm.js

dist/constants/index.esm.jsView on unpkg · L114
10730patternName = generic_password severity = medium line = 10730 matchedText = change_p...eña"
Medium
Secret Pattern

Hardcoded password in dist/constants/index.esm.js

dist/constants/index.esm.jsView on unpkg · L10730
10874patternName = generic_password severity = medium line = 10874 matchedText = change_p...رور"
Medium
Secret Pattern

Hardcoded password in dist/constants/index.esm.js

dist/constants/index.esm.jsView on unpkg · L10874

Findings

1 High8 Medium7 Low
HighOversized Source Filedist/custom-editor-B-nJj0EX.esm.js
MediumSecret Patterndist/constants/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/constants/index.esm.js
MediumSecret Patterndist/constants/index.esm.js
MediumSecret Patterndist/constants/index.esm.js
MediumSecret Patterndist/constants/index.esm.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/article-cell-editor-JDI676YI-C2BoypWr.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings