registry  /  @xsolla/xui-input-phone  /  0.184.0

@xsolla/xui-input-phone@0.184.0

A cross-platform phone-number input with an integrated, searchable country selector (flags and dial codes); ships with a `usePhoneNumber` hook for formatting and country detection. <!-- BEGIN:xui-mcp-instructions:input-phone --> A specialised input for en

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 4 file(s), 4.11 MB of source, external domains: www.w3.org

Source & flagged code

2 flagged · loading source
native/index.jsView file
342patternName = generic_password severity = medium line = 342 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

native/index.jsView on unpkg · L342
native/index.mjsView file
311patternName = generic_password severity = medium line = 311 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in native/index.mjs

native/index.mjsView on unpkg · L311

Findings

2 Medium3 Low
MediumSecret Patternnative/index.js
MediumSecret Patternnative/index.mjs
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
@xsolla/xui-input-phone@0.184.0: Suspicious npm security report | LPM Firewall