registry  /  @jtl-software/platform-ui-react  /  1.55.0

@jtl-software/platform-ui-react@1.55.0

## 🧭 Project Overview

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 1,357 file(s), 1.88 MB of source, external domains: avatars.githubusercontent.com, beispiel.de, cdn.jsdelivr.net, fakerjs.dev, github.com, loremflickr.com, picsum.photos, player.vimeo.com, www.google.com, www.w3.org, www.youtube.com

Source & flagged code

3 flagged · loading source
dist/components/icon/custom-icon/utils/iconMapping.jsView file
2patternName = aws_access_key severity = critical line = 2 matchedText = const C ... = {
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/components/icon/custom-icon/utils/iconMapping.jsView on unpkg · L2
2patternName = aws_access_key severity = critical line = 2 matchedText = const C ... = {
Critical
Secret Pattern

AWS access key ID in dist/components/icon/custom-icon/utils/iconMapping.js

dist/components/icon/custom-icon/utils/iconMapping.jsView on unpkg · L2
dist/assets/georgiaz.woff2View file
•path = dist/assets/georgiaz.woff2 kind = high_entropy_blob sizeBytes = 100688 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/georgiaz.woff2View on unpkg

Findings

2 Critical1 High3 Medium6 Low
CriticalCritical Secretdist/components/icon/custom-icon/utils/iconMapping.js
CriticalSecret Patterndist/components/icon/custom-icon/utils/iconMapping.js
HighShips High Entropy Blobdist/assets/georgiaz.woff2
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License