registry / @txgw/payout-components / 1.2.0

@txgw/payout-components@1.2.0

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 178 file(s), 6.52 MB of source, external domains: admin.midasbuy.com, atelierbram.github.io, cache.amap.com, card.harvestsharp.com, cdn.jsdelivr.net, chriskempson.com, clrs.cc, cors-anywhere.froala.com, cscorley.github.io, ethanschoonover.com, facebook.com, fb.me, froala.com, github.com, google.com, hart-dev.com, i.froala.com, mail.google.com, momentjs.com, play.vidyard.com, player.vimeo.com, railscasts.com, reactjs.org, redux.js.org, rolldown.rs, rutube.ru, schemas.microsoft.com, schemas.openxmlformats.org, sethawright.com, tybenz.com, www.dailymotion.com, www.monokai.nl, www.w3.org, www.youtube.com

Source & flagged code

3 flagged

dist/beneficiary-form-DWYNuxQk.jsView file

Lines 1-10javascript

1import{o as e,t}from"./rolldown-runtime-DXzHzmmG.js";import{t as n}from"./react-CWkhIp2c.js";import{a as r,i as a,o,t as i}from"./request-CLLl5Hjd.js";import{a as s,c as l,i as c,n as u,o as d,r as p,s as m,t as f,u as h}from"./tslib.es6-TRdqp4ac.js";import{$n as v,A as g,Bn as y,Dn as b,E as C,F as k,Ii as x,J as N,Mr as I,Nn as S,Nr as w,Or as E,Q as T,Qn as F,Tn as j,Tt as R,Wi as A,Xr as D,Xt as P,Z as O,Zn as _,Zr as L,_ as M,an as B,at as z,cr as q,ct as U,dt as $,gr as W,hr as H,ht as V,in as Q,it as Y,jn as J,jt as K,kt as G,li as Z,ln as X,lt as ee,mr as te,mt as ne,oi as re,on as ae, ...

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

2return(0,Zn.jsxs)("div",{className:je(Jn.paymentMethodItem,{[Jn.selected]:r&&!o,[Jn.collapsed]:o,[Jn.disabled]:i}),onClick:()=>{i||n?.()},children:[/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsxs)("div",{className:Jn.header,children:[/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsxs)("div",{className:Jn.titleContainer,children:[/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)("span",{className:Jn.title,children:l}),c?/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)("img",{className:Jn.icon,src:c,alt:l}):null]}),o&&!i?/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)("div",{className:Jn.changeButton,onClick:e=>{e.stopPropagation( ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

3/* @__PURE__ */

4/* @__PURE__ */(0,Zn.jsx)("label",{className:Jn.label,children:t}),

5/* @__PURE__ */

6/* @__PURE__ */(0,Zn.jsxs)("div",{className:je(Jn.alertContainer,{[Jn.hidden]:c}),children:[/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)("div",{className:Jn.alertIcon}),/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)("span",{className:Jn.alertText,children:p})]}),

7/* @__PURE__ */

8/* @__PURE__ */(0,Zn.jsx)("div",{className:Jn.paymentMethodListOptions,children:n.map(e=>/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)(Xn,{isCollapsed:s,method:e,isSelected:c===e.payment_method,onClick:()=>{return t=e.payment_method,void(o||(u(t),l(!0),a?.(t)));var t},disabled:o,t:i},e.payment_method))})]})}function tr({authCode:e,domain:t,codeVerifier:n,emitter:a,defaultValues:s={},customizations:l,locale:c,disableLookups:u=!1}){const{t:d}=o("beneficiaryForm"),{t:p}=o("payoutForm"),{t:m}=o("amis"),{t:f}=o("countryName"),h=r().getRecord({language:c||"en",namespace:"amis"});(0,ft.useEffect)(()=>{co ...

9return(0,Zn.jsxs)("div",{className:"payout-form",children:[/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)(Pe,{}),pe(F,{locale:qn(c||"en")},Ln)]})}function nr(e){const{mi18n:t}=e;/* @__PURE__ */ /* @__PURE__ */

10return(0,Zn.jsx)(a,{mi18n:t,fallback:"Loading...",children:/* @__PURE__ */ /* @__PURE__ */(0,Zn.jsx)(tr,{...e})})}export{gt as _,qt as a,_t as c,Pt as d,nr as default,kt as f,yt as g,Ct as h,$t as i,Lt as l,bt as m,Ut as n,Mt as o,xt as p,Wt as r,Bt as s,zt as t,Dt as u};

Long lines were clipped for display.

dist/Avatar-BcduLEa3.jsView file

Lines 1-1javascript

1import{o as t}from"./rolldown-runtime-DXzHzmmG.js";import{t as e}from"./react-CWkhIp2c.js";import{i as n,o as s,r}from"./tslib.es6-TRdqp4ac.js";import{Ii as a,Nn as o,Zr as i,it as p}from"./esm-DMJQA23h.js";import{Ft as l,R

Source & flagged code

3 flagged · loading source

dist/beneficiary-form-DWYNuxQk.jsView file

1import{o as e,t}from"./rolldown-runtime-DXzHzmmG.js";import{t as n}from"./react-CWkhIp2c.js";import{a as r,i as a,o,t as i}from"./request-CLLl5Hjd.js";import{a as s,c as l,i as c,n... L2: return(0,Zn.jsxs)("div",{className:je(Jn.paymentMethodItem,{[Jn.selected]:r&&!o,[Jn.collapsed]:o,[Jn.disabled]:i}),onClick:()=>{i||n?.()},children:[/* @__PURE__ */ /* @__PURE__ */(...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

1patternName = generic_password severity = medium line = 1 matchedText = import{o..._ */

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

dist/Avatar-BcduLEa3.jsView file

1import{o as t}from"./rolldown-runtime-DXzHzmmG.js";import{t as e}from"./react-CWkhIp2c.js";import{i as n,o as s,r}from"./tslib.es6-TRdqp4ac.js";import{Ii as a,Nn as o,Zr as i,it as...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/Avatar-BcduLEa3.jsView on unpkg · L1

Findings

2 High4 Medium7 Low

HighChild Process

HighSame File Env Network Executiondist/beneficiary-form-DWYNuxQk.js

MediumSecret Patterndist/beneficiary-form-DWYNuxQk.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/Avatar-BcduLEa3.js

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/beneficiary-form-DWYNuxQk.jsView file

Lines 1-10javascript

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/beneficiary-form-DWYNuxQk.jsView on unpkg · L1

3/* @__PURE__ */

4/* @__PURE__ */(0,Zn.jsx)("label",{className:Jn.label,children:t}),

5/* @__PURE__ */

7/* @__PURE__ */

Long lines were clipped for display.

dist/Avatar-BcduLEa3.jsView file

Lines 1-1javascript