registry  /  @plitzi/plitzi-sdk  /  0.32.5

@plitzi/plitzi-sdk@0.32.5

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
Manifest
CopyleftLicense
scanned 3 file(s), 2.05 MB of source, external domains: api.plitzi.com, bit.ly, cdn.plitzi.com, cdnjs.cloudflare.com, fonts.googleapis.com, github.com, go.apollo.dev, plitzi.com, react.dev, reactjs.org, reactrouter.com, server.plitzi.com, ssr.plitzi.com, www.w3.org

Source & flagged code

3 flagged · loading source
dist/plitzi-sdk.jsView file
1import*as e from"react";import t,{Children as n,Component as r,Fragment as i,Profiler as a,Suspense as o,cloneElement as s,createContext as l,createElement as c,forwardRef as u,isV... L2: return A(La,{value:n,children:t})},qa=({ref:e,children:t,tag:n="div",className:r="",interactionTriggers:i,interactionCallbacks:a,style:o,...s})=>{let l=w(()=>((e="")=>{if(e)return"... L3: /* @vite-ignore */
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/plitzi-sdk.jsView on unpkg · L1
dist/plitzi-sdk-dev-vendor.js.gzView file
•path = dist/plitzi-sdk-dev-vendor.js.gz kind = high_entropy_blob sizeBytes = 172338 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/plitzi-sdk-dev-vendor.js.gzView on unpkg
•path = dist/plitzi-sdk-dev-vendor.js.gz kind = compressed_blob sizeBytes = 172338 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/plitzi-sdk-dev-vendor.js.gzView on unpkg

Findings

2 High4 Medium6 Low
HighObfuscated
HighShips High Entropy Blobdist/plitzi-sdk-dev-vendor.js.gz
MediumDynamic Requiredist/plitzi-sdk.js
MediumNetwork
MediumShips Compressed Blobdist/plitzi-sdk-dev-vendor.js.gz
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowCopyleft License