@kubex/zinc@1.1.28: Suspicious npm security report (Warn)

Loading npm security reports…

@kubex/zinc@1.1.28: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged

docs/pages/components/reveal.mdView file

Lines 306-346markdown

306 <strong>Secret Key</strong>

307 <zn-chip size="small" type="warning">Sensitive</zn-chip>

308 </div>

309 <zn-reveal duration="5000"

310 initial="sk_live_••••••••••••••••••••"

311 revealed="sk_live_xyz7890abcdef1234"

312 style="font-family: monospace; padding: 0.75rem; background: var(--zn-color-neutral-100); border-radius: 4px; display: block;">

313 </zn-reveal>

314 <div style="margin-top: 0.5rem; font-size: 0.75rem; color: var(--zn-color-neutral-600);">

315 Click to reveal for 5 seconds

316 </div>

317 </div>

318

319 <div>

320 <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 0.5rem;">

321 <strong>Webhook Secret</strong>

322 <zn-chip size="small" type="info">Optional</zn-chip>

323 </div>

324 <zn-reveal duration="5000"

325 initial="whsec_••••••••••••••••••••"

326 revealed="whsec_1234567890abcdefghij"

High

High Secret

Package contains a high-severity secret pattern.

docs/pages/components/reveal.mdView on unpkg · L326

High

Secret Pattern

Stripe webhook signing secret in docs/pages/components/reveal.md

docs/pages/components/reveal.mdView on unpkg · L326

327 style="font-family: monospace; padding: 0.75rem; background: var(--zn-color-neutral-100); border-radius: 4px; display: block;">

328 </zn-reveal>

329 <div style="margin-top: 0.5rem; font-size: 0.75rem; color: var(--zn-color-neutral-600);">

330 Click to reveal for 5 seconds

331 </div>

332 </div>

333 </div>

334</div>

335```

336

337### User Profile Example

338

339Show masked personal information that can be revealed on demand.

340

341```html:preview

342<div style="max-width: 500px; border: 1px solid var(--zn-color-neutral-200); border-radius: 8px; padding: 1.5rem;">

343 <h3 style="margin: 0 0 1rem 0;">Personal Information</h3>

344

345 <div style="display: grid; gap: 1rem;">

346 <div style="display: grid; grid-template-columns: 140px 1fr; gap: 1rem; align-items: center;">

docs/eleventy.config.cjsView file

Lines 1-21javascript

1/* eslint-disable no-invalid-this */

2const fs = require('fs');

3const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

docs/eleventy.config.cjsView on unpkg · L1

dist/zn.min.jsView file

•path = dist/zn.min.js kind = oversized_source_file sizeBytes = 3545152 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/zn.min.jsView on unpkg

Source & flagged code

5 flagged · loading source

docs/pages/components/reveal.mdView file

326patternName = stripe_webhook_secret severity = high line = 326 matchedText = revealed...hij"

High

High Secret

Package contains a high-severity secret pattern.

docs/pages/components/reveal.mdView on unpkg · L326

326patternName = stripe_webhook_secret severity = high line = 326 matchedText = revealed...hij"

High

Secret Pattern

Stripe webhook signing secret in docs/pages/components/reveal.md

docs/pages/components/reveal.mdView on unpkg · L326

docs/eleventy.config.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @kubex/zinc@1.1.27 matchedIdentity = npm:QGt1YmV4L3ppbmM:1.1.27 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

docs/eleventy.config.cjsView on unpkg

1/* eslint-disable no-invalid-this */ L2: const fs = require('fs'); L3: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

docs/eleventy.config.cjsView on unpkg · L1

dist/zn.min.jsView file

•path = dist/zn.min.js kind = oversized_source_file sizeBytes = 3545152 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/zn.min.jsView on unpkg

Source & flagged code

5 flagged

docs/pages/components/reveal.mdView file

Lines 306-346markdown

306 <strong>Secret Key</strong>

307 <zn-chip size="small" type="warning">Sensitive</zn-chip>

308 </div>

309 <zn-reveal duration="5000"

310 initial="sk_live_••••••••••••••••••••"

311 revealed="sk_live_xyz7890abcdef1234"

312 style="font-family: monospace; padding: 0.75rem; background: var(--zn-color-neutral-100); border-radius: 4px; display: block;">

313 </zn-reveal>

314 <div style="margin-top: 0.5rem; font-size: 0.75rem; color: var(--zn-color-neutral-600);">

315 Click to reveal for 5 seconds

316 </div>

317 </div>

318

319 <div>

320 <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 0.5rem;">

321 <strong>Webhook Secret</strong>

322 <zn-chip size="small" type="info">Optional</zn-chip>

323 </div>

324 <zn-reveal duration="5000"

325 initial="whsec_••••••••••••••••••••"

326 revealed="whsec_1234567890abcdefghij"

High

High Secret

Package contains a high-severity secret pattern.

docs/pages/components/reveal.mdView on unpkg · L326

High

Secret Pattern

Stripe webhook signing secret in docs/pages/components/reveal.md

docs/pages/components/reveal.mdView on unpkg · L326

327 style="font-family: monospace; padding: 0.75rem; background: var(--zn-color-neutral-100); border-radius: 4px; display: block;">

328 </zn-reveal>

329 <div style="margin-top: 0.5rem; font-size: 0.75rem; color: var(--zn-color-neutral-600);">

330 Click to reveal for 5 seconds

331 </div>

332 </div>

333 </div>

334</div>

335```

336

337### User Profile Example

338

339Show masked personal information that can be revealed on demand.

340

341```html:preview

342<div style="max-width: 500px; border: 1px solid var(--zn-color-neutral-200); border-radius: 8px; padding: 1.5rem;">

343 <h3 style="margin: 0 0 1rem 0;">Personal Information</h3>

344

345 <div style="display: grid; gap: 1rem;">

346 <div style="display: grid; grid-template-columns: 140px 1fr; gap: 1rem; align-items: center;">

docs/eleventy.config.cjsView file

Lines 1-21javascript

1/* eslint-disable no-invalid-this */

2const fs = require('fs');

3const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

docs/eleventy.config.cjsView on unpkg · L1

dist/zn.min.jsView file

•path = dist/zn.min.js kind = oversized_source_file sizeBytes = 3545152 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/zn.min.jsView on unpkg

@kubex/zinc@1.1.28

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code