registry / valtech-components / 4.0.261

valtech-components@4.0.261

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 639 file(s), 10.4 MB of source, external domains: docs.com, example.com, firebasestorage.googleapis.com, github.com, m.facebook.com, myvaltech-dev.web.app, myvaltech.com, pagead2.googlesyndication.com, t.me, twitter.com, wa.me, www.facebook.com, www.gstatic.com, www.instagram.com, www.linkedin.com, www.tiktok.com, www.w3.org, www.youtube.com

Oversized source lightweight scan

fesm2022/valtech-components.mjs3.98 MB file, sampled 256 KB

HighEntropyStrings

Source & flagged code

4 flagged

esm2022/lib/services/i18n/default-content.mjsView file

Lines 338-378javascript

338 random: 'Random',

339 pullToRefresh: 'Pull to refresh',

340 timeExpired: 'Time expired',

341 qrCode: 'QR Code',

342 // Payment status

343 paymentPending: 'Pending',

344 paymentProcessing: 'Processing',

345 paymentPaid: 'Paid',

346 paymentRefunded: 'Refunded',

347 paymentFailed: 'Failed',

348 },

349 },

350 _auth: {

351 es: {

352 // Login

353 loginTitle: 'Iniciar sesión',

354 email: 'Correo electrónico',

355 emailPlaceholder: 'tu@email.com',

356 emailRequired: 'El correo es requerido',

357 emailInvalid: 'Ingresa un correo válido',

358 password: 'Contraseña',

Medium

Secret Pattern

Package contains a possible secret pattern.

esm2022/lib/services/i18n/default-content.mjsView on unpkg · L358

359 passwordPlaceholder: '••••••••',

360 passwordRequired: 'La contraseña es requerida',

361 loginSubmit: 'Iniciar sesión',

362 // OAuth

363 orContinueWith: 'o continúa con',

364 continueWithGoogle: 'Continuar con Google',

365 continueWithApple: 'Continuar con Apple',

366 continueWithMicrosoft: 'Continuar con Microsoft',

367 connecting: 'Conectando...',

368 // Register

369 registerTitle: 'Crear cuenta',

370 fullName: 'Nombre completo',

371 namePlaceholder: 'Tu nombre',

372 nameRequired: 'El nombre es requerido',

373 nameMinLength: 'Mínimo 2 caracteres',

374 passwordMinLength: 'Mínimo 8 caracteres',

375 passwordStrength: 'Mínimo 8 caracteres, una mayúscula, una minúscula, un número y un carácter especial',

376 registerSubmit: 'Registrarse',

377 noAccount: '¿No tienes cuenta?',

378 register: 'Registrarse',

Lines 537-577javascript

537 errorInvalidCredentials: 'Correo o contraseña incorrectos',

538 errorEmailNotVerified: 'Debes verificar tu correo electrónico',

539 errorAccountSuspended: 'Tu cuenta ha sido suspendida',

540 errorEmailExists: 'Este correo ya está registrado',

541 errorWeakPassword: 'La contraseña es muy débil',

542 errorInvalidCode: 'Código incorrecto',

src/lib/assets/fonts/Khula/khula-400-latin.woff2View file

•path = [redacted]-400-latin.woff2 kind = high_entropy_blob sizeBytes = 10792 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/lib/assets/fonts/Khula/khula-400-latin.woff2View on unpkg

fesm2022/valtech-components.mjsView file

•path = fesm2022/valtech-components.mjs kind = oversized_source_file sizeBytes = 4173982 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

fesm2022/valtech-components.mjsView on unpkg

Source & flagged code

4 flagged · loading source

esm2022/lib/services/i18n/default-content.mjsView file

358patternName = generic_password severity = medium line = 358 matchedText = password...ña',

Medium

Secret Pattern

Package contains a possible secret pattern.

esm2022/lib/services/i18n/default-content.mjsView on unpkg · L358

557patternName = generic_password severity = medium line = 557 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in esm2022/lib/services/i18n/default-content.mjs

esm2022/lib/services/i18n/default-content.mjsView on unpkg · L557

src/lib/assets/fonts/Khula/khula-400-latin.woff2View file

•path = [redacted]-400-latin.woff2 kind = high_entropy_blob sizeBytes = 10792 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/lib/assets/fonts/Khula/khula-400-latin.woff2View on unpkg

fesm2022/valtech-components.mjsView file

•path = fesm2022/valtech-components.mjs kind = oversized_source_file sizeBytes = 4173982 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

fesm2022/valtech-components.mjsView on unpkg

Findings

2 High5 Medium4 Low

HighShips High Entropy Blobsrc/lib/assets/fonts/Khula/khula-400-latin.woff2

HighOversized Source Filefesm2022/valtech-components.mjs

MediumSecret Patternesm2022/lib/services/i18n/default-content.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternesm2022/lib/services/i18n/default-content.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

esm2022/lib/services/i18n/default-content.mjsView file

Lines 338-378javascript

338 random: 'Random',

339 pullToRefresh: 'Pull to refresh',

340 timeExpired: 'Time expired',

341 qrCode: 'QR Code',

342 // Payment status

343 paymentPending: 'Pending',

344 paymentProcessing: 'Processing',

345 paymentPaid: 'Paid',

346 paymentRefunded: 'Refunded',

347 paymentFailed: 'Failed',

348 },

349 },

350 _auth: {

351 es: {

352 // Login

353 loginTitle: 'Iniciar sesión',

354 email: 'Correo electrónico',

355 emailPlaceholder: 'tu@email.com',

356 emailRequired: 'El correo es requerido',

357 emailInvalid: 'Ingresa un correo válido',

358 password: 'Contraseña',

Medium

Secret Pattern

Package contains a possible secret pattern.

esm2022/lib/services/i18n/default-content.mjsView on unpkg · L358

359 passwordPlaceholder: '••••••••',

360 passwordRequired: 'La contraseña es requerida',

361 loginSubmit: 'Iniciar sesión',

362 // OAuth

363 orContinueWith: 'o continúa con',

364 continueWithGoogle: 'Continuar con Google',

365 continueWithApple: 'Continuar con Apple',

366 continueWithMicrosoft: 'Continuar con Microsoft',

367 connecting: 'Conectando...',

368 // Register

369 registerTitle: 'Crear cuenta',

370 fullName: 'Nombre completo',

371 namePlaceholder: 'Tu nombre',

372 nameRequired: 'El nombre es requerido',

373 nameMinLength: 'Mínimo 2 caracteres',

374 passwordMinLength: 'Mínimo 8 caracteres',

375 passwordStrength: 'Mínimo 8 caracteres, una mayúscula, una minúscula, un número y un carácter especial',

376 registerSubmit: 'Registrarse',

377 noAccount: '¿No tienes cuenta?',

378 register: 'Registrarse',

Lines 537-577javascript

537 errorInvalidCredentials: 'Correo o contraseña incorrectos',

538 errorEmailNotVerified: 'Debes verificar tu correo electrónico',

539 errorAccountSuspended: 'Tu cuenta ha sido suspendida',

540 errorEmailExists: 'Este correo ya está registrado',

541 errorWeakPassword: 'La contraseña es muy débil',

542 errorInvalidCode: 'Código incorrecto',

src/lib/assets/fonts/Khula/khula-400-latin.woff2View file

•path = [redacted]-400-latin.woff2 kind = high_entropy_blob sizeBytes = 10792 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/lib/assets/fonts/Khula/khula-400-latin.woff2View on unpkg

fesm2022/valtech-components.mjsView file

•path = fesm2022/valtech-components.mjs kind = oversized_source_file sizeBytes = 4173982 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

fesm2022/valtech-components.mjsView on unpkg