registry / dash-ant-design / 0.1.2
dash-ant-design@0.1.2
⚠ Under reviewA dash component library based on ant design
Static Scan Results
scanned 14h ago · by rust-scannerStatic analysis completed at 97.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Decision evidence
public snapshotBehavioral surface
CryptoEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
3 flaggeddash_antd_components/async-chart.jsView file
1(self.webpackChunkdash_antd_components=self.webpackChunkdash_antd_components||[]).push([["async-chart"],{"./node_modules/.pnpm/@antv+coord@0.4.7/node_modules/@antv/coord/dist/coord...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dash_antd_components/async-chart.jsView on unpkg · L1dash_antd_components/async-socket-io.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dash_antd_components/async-socket-io.js#virtual:string-array:round1View on unpkgFindings
2 High2 Medium5 Low
HighSemantic Analysis Limiteddash_antd_components/async-socket-io.js#virtual:string-array:round1
HighKnown Malware Source Similaritydash_antd_components/async-video-hls.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldash_antd_components/async-chart.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to dash-ant-design@0.1.2.
See all versions of dash-ant-design for other recorded verdicts.
- Review the evidence and your use of dash-ant-design@0.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.