registry / ctt-babylon / 0.24.83
ctt-babylon@0.24.83
This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 17.3.0.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection shows an Angular UI library with no lifecycle hooks or Node execution path. The scanner's redirect and key findings correspond to user-invoked link handling and a Google Fonts feature, not a concrete attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user clicks an external link or uses the color-picker UI.
Impact
The code can open configured external links and request font metadata, but no unconsented install-time or data-exfiltration behavior was found.
Mechanism
Browser UI navigation and Google Fonts metadata retrieval.
AI rationale
Static inspection shows an Angular UI library with no lifecycle hooks or Node execution path. The scanner's redirect and key findings correspond to user-invoked link handling and a Google Fonts feature, not a concrete attack.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package contains a browser-only external-link handler that opens the configured link in a new tab.
- The color-picker service requests the Google Fonts catalogue with an embedded browser API key.
- The manifest has only tslib as a runtime dependency and no lifecycle scripts.
Evidence against
- No install, preinstall, postinstall, bin, or self-dependency chain is declared.
- The link behavior is invoked by a UI click and uses its supplied href; no identity material is appended.
- The observed network request is limited to Google Fonts metadata after the color-picker login path.
- No credential harvesting, exfiltration, shell execution, dynamic code execution, persistence, or project-file mutation was found in the inspected source.
Behavioral surface
ChildProcessNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggedesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView file
16patternName = google_api_key
severity = high
line = 16
High
High Secret
Package contains a high-severity secret pattern.
esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView on unpkg · L1616patternName = google_api_key
severity = high
line = 16
High
Secret Pattern
Google API key in esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
esm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjsView on unpkg · L16esm2022/lib/directives/link-type/link-type.directive.mjsView file
Findings
1 Critical3 High3 Medium5 Low
CriticalBrowser Phishing Redirectesm2022/lib/directives/link-type/link-type.directive.mjs
HighHigh Secretesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
HighSemantic Analysis Limitedpackage.json
HighSecret Patternesm2022/lib/components/core/babylon-color-picker/babylon-color-picker.component.mjs
MediumNetwork
MediumOversized Source Filefesm2022/ctt-babylon.mjs
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceesm2022/lib/directives/link-type/link-type.directive.mjs
Affected versions and remediation
This report applies to ctt-babylon@0.24.83.
See all versions of ctt-babylon for other recorded verdicts.
- Review the evidence and your use of ctt-babylon@0.24.83 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.