registry / ctt-babylon / 0.26.30
ctt-babylon@0.26.30
This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 17.3.0.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe scanner’s redirect claim is not supported by the flagged directive: its external navigation uses the supplied link value on handler invocation, while its separate redirect helper navigates to the site root and scrolls to an anchor. The manifest has no lifecycle scripts, and the reviewed changed slider code loads UI assets for slider setup.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Application use: a user clicks a link or a slider directive initializes in the browser.
Impact
No identity transfer, credential collection, or unrelated external redirect was identified in the reviewed paths.
Mechanism
The link directive opens its supplied URL or navigates to the site root for an anchor; the slider directive loads jQuery and Slick assets when needed.
AI rationale
The scanner’s redirect claim is not supported by the flagged directive: its external navigation uses the supplied link value on handler invocation, while its separate redirect helper navigates to the site root and scrolls to an anchor. The manifest has no lifecycle scripts, and the reviewed changed slider code loads UI assets for slider setup.
Network endpoints1
www.google.com/maps/search/
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares no lifecycle scripts and exports an Angular library entry point.
- External links are opened from the directive’s supplied URL when the link handler runs in the browser.
- The flagged redirect helper navigates to the site’s own root and scrolls to a requested page anchor.
- The changed slider directive loads jQuery and Slick assets to initialize sliders.
Evidence against
- The package is an Angular component library with UI-related peer dependencies.
- The redirect helper does not attach identity material or send data to an external host.
- The slider code loads package asset paths as part of slider setup.
Behavioral surface
Network
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggedesm2022/lib/directives/link-type/link-type.directive.mjsView file
139? detected.value
L140: : 'https://' + detected.value.replace(/^\/+/, '');
L141: try {
L142: window.open(finalUrl, '_blank');
L143: }
...
L345: }] } });
L346: //# sourceMappingURL=data:application/json;base64,[redacted]...
Critical
Browser Phishing Redirect
Source redirects browser users to an external URL carrying identity material.
esm2022/lib/directives/link-type/link-type.directive.mjsView on unpkg · L139116handleExternalLink(url) {
if (!isPlatformBrowser(this.platformId))
return;
const detected = this.detectExternalKind(url);
switch (detected.kind) {
case 'phone':
this.openPhone(detected.value);
break;
case 'email':
this.openEmail(detected.value);
break;
case 'address':
this.openAddress(detected.value);
break;
default:
if (!detected.value ||
de
Low
Ai Review Evidence
External links are opened from the directive’s supplied URL when the link handler runs in the browser.
esm2022/lib/directives/link-type/link-type.directive.mjsView on unpkg · L116Findings
1 Critical3 Medium7 Low
CriticalBrowser Phishing Redirectesm2022/lib/directives/link-type/link-type.directive.mjs
MediumNetwork
MediumOversized Source Filefesm2022/ctt-babylon.mjs
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceesm2022/lib/directives/link-type/link-type.directive.mjs
LowAi Review Evidenceesm2022/lib/directives/link-type/link-type.directive.mjs
LowAi Review Evidenceesm2022/lib/directives/babylon-sliders/babylon-sliders.directive.mjs
Affected versions and remediation
This report applies to ctt-babylon@0.26.30.
See all versions of ctt-babylon for other recorded verdicts.
- Review the evidence and your use of ctt-babylon@0.26.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.