registry / ui-soxo-bootstrap-core / 2.6.42

ui-soxo-bootstrap-core@2.6.42

All the Core Components for you to start

AI Security Review

scanned 15d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is a React UI/core component library with app-level API calls and configurable script execution utilities that are invoked by consuming application features.

Static reason

One or more suspicious static signals were detected.

Trigger

runtime use by the consuming React application

Impact

No unconsented install-time or import-time compromise identified.

Mechanism

UI components, API helpers, and app-provided script execution

Rationale

Static inspection found risky primitives, but they are package-aligned UI/runtime features rather than hidden install-time or import-time attack behavior. No concrete exfiltration, persistence, destructive action, or unconsented control-surface mutation was found.

Evidence

package.jsonindex.jscore/lib/utils/script.utils.jscore/lib/elements/complex/google-location-input/map-container-library-load.jscore/components/component-loader/component-loader.jscore/lib/utils/api/api.utils.jscore/lib/utils/http/http.utils.js

Network endpoints4

hgrntky25ejsmw3zobq3u6lk3q0tploo.lambda-url.ap-northeast-1.on.aws/localhost:8085/remoteEntry.js/SGIFPCapture

ui-soxo-bootstrap-core@2.6.42

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code