registry / valtech-components / 4.0.277

valtech-components@4.0.277

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 648 file(s), 10.4 MB of source, external domains: docs.com, example.com, firebasestorage.googleapis.com, github.com, m.facebook.com, myvaltech-dev.web.app, myvaltech.com, pagead2.googlesyndication.com, t.me, twitter.com, wa.me, www.facebook.com, www.gstatic.com, www.instagram.com, www.linkedin.com, www.tiktok.com, www.w3.org, www.youtube.com

Oversized source lightweight scan

fesm2022/valtech-components.mjs4.01 MB file, sampled 256 KB

HighEntropyStrings

Source & flagged code

4 flagged

esm2022/lib/services/i18n/default-content.mjsView file

Lines 348-388javascript

348 },

349 },

350 _common: {

351 es: {

352 fieldRequired: 'Este campo es obligatorio.',

353 fieldInvalidEmail: 'Ingresa un correo válido.',

354 },

355 en: {

356 fieldRequired: 'This field is required.',

357 fieldInvalidEmail: 'Enter a valid email address.',

358 },

359 },

360 _auth: {

361 es: {

362 // Login

363 loginTitle: 'Iniciar sesión',

364 email: 'Correo electrónico',

365 emailPlaceholder: 'tu@email.com',

366 emailRequired: 'El correo es requerido',

367 emailInvalid: 'Ingresa un correo válido',

368 password: 'Contraseña',

Medium

Secret Pattern

Package contains a possible secret pattern.

esm2022/lib/services/i18n/default-content.mjsView on unpkg · L368

369 passwordPlaceholder: '••••••••',

370 passwordRequired: 'La contraseña es requerida',

371 loginSubmit: 'Iniciar sesión',

372 // OAuth

373 orContinueWith: 'o continúa con',

374 continueWithGoogle: 'Continuar con Google',

375 continueWithApple: 'Continuar con Apple',

376 continueWithMicrosoft: 'Continuar con Microsoft',

377 connecting: 'Conectando...',

378 // Register

379 registerTitle: 'Crear cuenta',

380 fullName: 'Nombre completo',

381 namePlaceholder: 'Tu nombre',

382 nameRequired: 'El nombre es requerido',

383 nameMinLength: 'Mínimo 2 caracteres',

384 passwordMinLength: 'Mínimo 8 caracteres',

385 passwordStrength: 'Mínimo 8 caracteres, una mayúscula, una minúscula, un número y un carácter especial',

386 registerSubmit: 'Registrarse',

387 noAccount: '¿No tienes cuenta?',

388 register: 'Registrarse',

Lines 547-587javascript

547 errorInvalidCredentials: 'Correo o contraseña incorrectos',

548 errorEmailNotVerified: 'Debes verificar tu correo electrónico',

549 errorAccountSuspended: 'Tu cuenta ha sido suspendida',

550 errorEmailExists: 'Este correo ya está registrado',

551 errorWeakPassword: 'La contraseña es muy débil'

src/lib/assets/fonts/Khula/khula-400-latin.woff2View file

•path = [redacted]-400-latin.woff2 kind = high_entropy_blob sizeBytes = 10792 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/lib/assets/fonts/Khula/khula-400-latin.woff2View on unpkg

fesm2022/valtech-components.mjsView file

•path = fesm2022/valtech-components.mjs kind = oversized_source_file sizeBytes = 4201227 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

fesm2022/valtech-components.mjsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code