registry / nitxui / 2.0.2

nitxui@2.0.2

The official UI component library for Nitx projects.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 512 KB of source, external domains: cdn-new.nitx.app, example.com, res.cloudinary.com, ui-avatars.com, www.w3.org

Source & flagged code

6 flagged

dist/index.mjsView file

Lines 160-225javascript

160 sendOTP: "\u0625\u0631\u0633\u0627\u0644 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642",

161 verifying: "\u062C\u0627\u0631\u064A \u0627\u0644\u062A\u062D\u0642\u0642...",

162 verify: "\u062A\u0623\u0643\u064A\u062F",

163 error: "\u0641\u0634\u0644 \u0641\u064A \u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u0631\u0645\u0632. \u062D\u0627\u0648\u0644 \u0645\u0631\u0629 \u0623\u062E\u0631\u0649.",

164 success: {

165 otpSent: "\u062A\u0645 \u0625\u0631\u0633\u0627\u0644 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642 \u0628\u0646\u062C\u0627\u062D",

166 verificationSuccess: "\u062A\u0645 \u062A\u062D\u062F\u064A\u062B \u0631\u0642\u0645 \u0627\u0644\u0647\u0627\u062A\u0641 \u0628\u0646\u062C\u0627\u062D"

167 },

168 "Text Message": "\u0631\u0633\u0627\u0644\u0629 \u0646\u0635\u064A\u0629",

169 errors: {

170 invalidPhone: "\u0631\u0642\u0645 \u0627\u0644\u0647\u0627\u062A\u0641 \u063A\u064A\u0631 \u0635\u0627\u0644\u062D.",

171 sendOTP: "\u0641\u0634\u0644 \u0625\u0631\u0633\u0627\u0644 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642",

172 invalidOTP: "\u064A\u0631\u062C\u0649 \u0625\u062F\u062E\u0627\u0644 \u0631\u0645\u0632 \u062A\u062D\u0642\u0642 \u0635\u0627\u0644\u062D \u0645\u0643\u0648\u0651\u0646 \u0645\u0646 6 \u0623\u0631\u0642\u0627\u0645",

173 verifyOTP: "\u0641\u0634\u0644 \u0627\u0644\u062A\u062D\u0642\u0642 \u0645\u0646 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642"

174 }

175 },

176 password: {

177 title: {

178 email: "\u0637\u0644\u0628 \u0625\u0639\u0627\u062F\u0629 \u062A\u0639\u064A\u064A\u0646 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631",

179 otp: "\u062A\u062D\u0642\u0642 \u0645\u0646 \u0627\u0644\u0631\u0645\u0632",

180 password: "\u062A\u0639\u064A\u064A\u0646 \u0643\u0644\u0645\u0629 \u0645\u0631\u0648\u0631 \u062C\u062F\u064A\u062F\u0629"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.mjsView on unpkg · L180

181 },

182 description: {

183 email: "\u0633\u0646\u0631\u0633\u0644 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642 \u0625\u0644\u0649 \u0628\u0631\u064A\u062F\u0643 \u0627\u0644\u0625\u0644\u0643\u062A\u0631\u0648\u0646\u064A \u0644\u0644\u062A\u062D\u0642\u0642 \u0645\u0646 \u0647\u0648\u064A\u062A\u0643.",

184 otp: "\u0623\u062F\u062E\u0644 \u0627\u0644\u0631\u0645\u0632 \u0627\u0644\u0645\u0643\u0648\u0651\u0646 \u0645\u0646 6 \u0623\u0631\u0642\u0627\u0645 \u0627\u0644\u0630\u064A \u0623\u0631\u0633\u0644\u0646\u0627\u0647 \u0625\u0644\u0649 \u0628\u0631\u064A\u062F\u0643 \u0627\u0644\u0625\u0644\u0643\u062A\u0631\u0648\u0646\u064A.",

185 password: "\u0627\u062E\u062A\u0631 \u0643\u0644\u0645\u0629 \u0645\u0631\u0648\u0631 \u0642\u0648\u064A\u0629 \u0648\u062A\u0623\u0643\u062F \u0645\u0646 \u062A\u0630\u0643\u0631\u0647\u0627."

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L185

186 },

187 emailLabel: "\u0627\u0644\u0628\u0631\u064A\u062F \u0627\u0644\u0625\u0644\u0643\u062A\u0631\u0648\u0646\u064A",

188 otpLabel: "\u0623\u062F\u062E\u0644 \u0627\u0644\u0631\u0645\u0632",

189 otpPlaceholder: "123456",

190 newPasswordLabel: "\u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u062C\u062F\u064A\u062F\u0629",

191 newPasswordPlaceholder: "\u0623\u062F\u062E\u0644 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u062C\u062F\u064A\u062F\u0629",

192 confirmPasswordLabel: "\u062A\u0623\u0643\u064A\u062F \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u062C\u062F\u064A\u062F\u0629",

193 confirmPasswordPlaceholder: "\u062A\u0623\u0643\u064A\u062F \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u062C\u062F\u064A\u062F\u0629",

194 back: "\u0631\u062C\u0648\u0639",

195 cancel: "\u0625\u0644\u063A\u0627\u0621",

196 sendOTP: "\u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u0631\u0645\u0632",

197 resendOTP: "\u0625\u0639\u0627\u062F\u0629 \u0627\u0644\u0625\u0631\u0633\u0627\u0644",

198 didntReceiveOTP: "\u0644\u0645 \u062A\u0633\u062A\u0644\u0645 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642\u061F",

199 verifyOTP: "\u062A\u062D\u0642\u0642 \u0645\u0646 \u0627\u0644\u0631\u0645\u0632",

200 resetPassword: "\u0625\u0639\u0627\u062F\u0629 \u062A\u0639\u064A\u064A\u0646 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631",

201 otpExpiresIn: "\u062A\u0646\u062A\u0647\u064A \u0635\u0644\u0627\u062D\u064A\u0629 \u0627\u0644\u0631\u0645\u0632 \u062E\u0644\u0627\u0644",

202 errors: {

203 email: "\u0627\u0644\u0628\u0631\u064A\u062F \u0627\u0644\u0625\u0644\u0643\u062A\u0631\u0648\u0646\u064A \u0645\u0637\u0644\u0648\u0628",

204 otp: "\u064A\u0631\u062C\u0649 \u0625\u062F\u062E\u0627\u0644 \u0631\u0645\u0632 \u062A\u062D\u0642\u0642 \u0635\u0627\u0644\u062D \u0645\u0643\u0648\u0651\u0646 \u0645\u0646 6 \u0623\u0631\u0642\u0627\u0645",

205 password: "\u064A\u062C\u0628 \u0623\u0646 \u062A\u062A\u0643\u0648\u0646 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0645\u0646 8 \u0623\u062D\u0631\u0641 \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644",

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L205

206 passwordConfirmation: "\u0643\u0644\u0645\u062A\u0627 \u0627\u0644\u0645\u0631\u0648\u0631 \u063A\u064A\u0631 \u0645\u062A\u0637\u0627\u0628\u0642\u062A\u064A\u0646"

207 },

208 success: {

209 otpSent: "\u062A\u0645 \u0625\u0631\u0633\u0627\u0644 \u0631\u0645\u0632 \u0627\u0644\u062A\u062D\u0642\u0642 \u0628\u0646\u062C\u0627\u062D",

210 otpVerified: "\u062A\u0645 \u0627\u0644\u062A\u062D\u0642\u0642 \u0645\u0646 \u0627\u0644\u0631\u0645\u0632 \u0628\u0646\u062C\u0627\u062D",

211 passwordReset: "\u062A\u0645\u062A \u0625\u0639\u0627\u062F\u0629 \u062A\u0639\u064A\u064A\u0646 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0628\u0646\u062C\u0627\u062D",

212 message: "\u062A\u0645\u062A \u0625\u0639\u0627\u062F\u0629 \u062A\u0639\u064A\u064A\u0646 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0628\u0646\u062C\u0627\u062D"

213 },

214 strength: {

215 weak_helper: "\u0627\u0633\u062A\u062E\u062F\u0645 8 \u0623\u062D\u0631\u0641 \u0623\u0648 \u0623\u0643\u062B\u0631 \u0645\u0639 \u0627\u0644\u0623\u062D\u0631\u0641 \u0627\u0644\u0643\u0628\u064A\u0631\u0629 \u0648\u0627\u0644\u0635\u063A\u064A\u0631\u0629 \u0648\u0627\u0644\u0623\u0631\u0642\u0627\u0645 \u0648\u0627\u0644\u0631\u0645\u0648\u0632.",

216 "Very weak": "\u0636\u0639\u064A\u0641 \u062C\u062F\u0627\u064B",

217 Weak: "\u0636\u0639\u064A\u0641",

218 Fair: "\u0645\u0642\u0628\u0648\u0644",

219 Good: "\u062C\u064A\u062F",

220 Strong: "\u0642\u0648\u064A",

221 "Very strong": "\u0642\u0648\u064A \u062C\u062F\u0627\u064B"

222 }

223 },

224 VerifyMethodsSelector: {

225 title: "\u0627\u062E\u062A\u0631 \u0637\u0631\u064A\u0642\u0629 \u0627\u0644\u062A\u062D\u0642\u0642",

Lines 1095-1160javascript

1095 sendOTP: "Send OTP",

1096 verifying: "Verifying...",

1097 verify: "Verify",

1098 error: "Failed to send OTP. Try again.",

1099 success: {

1100 otpSent

Source & flagged code

6 flagged · loading source

dist/index.mjsView file

180patternName = generic_password severity = medium line = 180 matchedText = password...629"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.mjsView on unpkg · L180

185patternName = generic_password severity = medium line = 185 matchedText = password...27."

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L185

205patternName = generic_password severity = medium line = 205 matchedText = password...44",

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L205

1115patternName = generic_password severity = medium line = 1115 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjs

Findings

7 Medium3 Low

MediumSecret Patterndist/index.mjs

MediumEnvironment Vars

MediumSecret Patterndist/index.mjs

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to nitxui@2.0.2.

See all versions of nitxui for other recorded verdicts.

Review the evidence and your use of nitxui@2.0.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-20 19:22:30.926Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.