registry / ctt-babylon / 0.24.78
ctt-babylon@0.24.78
This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 17.3.0.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is a browser-oriented Angular component library with no lifecycle hooks or Node execution path. The flagged URL opening and Google Fonts request are feature-aligned and user-triggered, with no concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user clicks a configured link or logs into the color panel.
Impact
No unconsented execution, local data access, or exfiltration was found.
Mechanism
User-triggered browser navigation and Google Fonts API request.
AI rationale
The package is a browser-oriented Angular component library with no lifecycle hooks or Node execution path. The flagged URL opening and Google Fonts request are feature-aligned and user-triggered, with no concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exports an Angular module and contains no lifecycle scripts.
- The link directive opens a configured external URL only after its click handler is invoked.
- The color panel uses its configured Google Fonts key only to request a font-family list.
Evidence against
- No install-time execution, shell execution, dynamic code evaluation, or filesystem access was found.
- The flagged redirect is a user-triggered UI link feature, not an automatic redirect or identity-data transfer.
- The network request is limited to the Google Fonts API; no credential or browser-data exfiltration was found.
Behavioral surface
ChildProcessNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggedesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView file
16patternName = google_api_key
severity = high
line = 16
High
High Secret
Package contains a high-severity secret pattern.
esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView on unpkg · L1616patternName = google_api_key
severity = high
line = 16
High
Secret Pattern
Google API key in esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView on unpkg · L16esm2022/lib/directives/link-type/link-type.directive.mjsView file
Findings
1 Critical3 High3 Medium5 Low
CriticalBrowser Phishing Redirectesm2022/lib/directives/link-type/link-type.directive.mjs
HighHigh Secretesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
HighSemantic Analysis Limitedpackage.json
HighSecret Patternesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
MediumNetwork
MediumOversized Source Filefesm2022/ctt-babylon.mjs
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceesm2022/lib/directives/link-type/link-type.directive.mjs
Affected versions and remediation
This report applies to ctt-babylon@0.24.78.
See all versions of ctt-babylon for other recorded verdicts.
- Review the evidence and your use of ctt-babylon@0.24.78 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.