registry / ctt-babylon / 0.26.24
ctt-babylon@0.26.24
This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 17.3.0.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe manifest contains no lifecycle scripts, and the flagged redirect behavior handles supplied links rather than constructing a destination with identity data. The mapper excerpt and required tslib sources show ordinary data mapping and TypeScript helper code.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A browser user activates an external link provided to the directive.
Impact
No confirmed attack surface was established in the inspected behavior.
Mechanism
The handler opens the detected URL in a new tab, or routes phone, email, and address links to their matching handlers.
AI rationale
The manifest contains no lifecycle scripts, and the flagged redirect behavior handles supplied links rather than constructing a destination with identity data. The mapper excerpt and required tslib sources show ordinary data mapping and TypeScript helper code.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install scripts and exposes the Angular module as its entrypoint.
- The mapper maps configured social media fields into output data.
- The bundled tslib metadata identifies its entrypoints and marks the package side-effect free.
- tslib modules expose standard TypeScript helpers such as class inheritance.
- The link directive opens an external URL supplied to its handler after a browser-side user action.
- The directive routes phone, email, and address links to their corresponding handlers.
Evidence against
Behavioral surface
Network
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggedesm2022/lib/directives/link-type/link-type.directive.mjsView file
139? detected.value
L140: : 'https://' + detected.value.replace(/^\/+/, '');
L141: try {
L142: window.open(finalUrl, '_blank');
L143: }
...
L345: }] } });
L346: //# sourceMappingURL=data:application/json;base64,[redacted]...
Critical
Browser Phishing Redirect
Source redirects browser users to an external URL carrying identity material.
esm2022/lib/directives/link-type/link-type.directive.mjsView on unpkg · L139fesm2022/ctt-babylon.mjsView file
•path = fesm2022/ctt-babylon.mjs
kind = oversized_source_file
sizeBytes = 57898867
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
fesm2022/ctt-babylon.mjsView on unpkgpackage.jsonView file
Findings
1 Critical3 Medium8 Low
CriticalBrowser Phishing Redirectesm2022/lib/directives/link-type/link-type.directive.mjs
MediumNetwork
MediumOversized Source Filefesm2022/ctt-babylon.mjs
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowAi Review Evidencepackage.json
LowAi Review Evidenceesm2022/lib/services/mapper/mapper.service.mjs
LowAi Review Evidence.lpm-dependency-evidence-3e5e9567-a2cc-47f9-8b72-3b74f460ed37/0/npm-linux/package.json
LowAi Review Evidence.lpm-dependency-evidence-3e5e9567-a2cc-47f9-8b72-3b74f460ed37/0/npm-linux/modules/index.js
LowAi Review Evidence.lpm-dependency-evidence-3e5e9567-a2cc-47f9-8b72-3b74f460ed37/0/npm-linux/tslib.es6.mjs
Affected versions and remediation
This report applies to ctt-babylon@0.26.24.
See all versions of ctt-babylon for other recorded verdicts.
- Review the evidence and your use of ctt-babylon@0.26.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.