registry / vue-layout-gitcode / 1.12.15-beta.2

vue-layout-gitcode@1.12.15-beta.2

用于 gitcode 站点生产环境使用

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 1.19 MB of source, external domains: ai.gitcode.com, atomgit.com, beian.miit.gov.cn, beian.mps.gov.cn, cdn-static.gitcode.com, competition.gitcode, docs.atomgit.com, docs.gitcode.com, gitcode-img.obs.cn-south-1.myhuaweicloud.com, gitcode.com, gitcode.s2.udesk.cn, news.gitcode.com, pre-news.atomgit.com, pre-news.gitcode.com, test-news.atomgit.com, test-news.gitcode.net, test.gitcode.net, tianqi.gitcode.com, vue-i18n.intlify.dev, web-api.gitcode.com, www.csdn.net, www.huaweicloud.com, www.w3.org, www.zhipin.com

Source & flagged code

2 flagged

index-CtgqGX_c.jsView file

8348patternName = generic_password severity = medium line = 8348 matchedText = password...in",

Medium

Secret Pattern

Package contains a possible secret pattern.

index-CtgqGX_c.jsView on unpkg · L8348

4555const { code: code2, detectError } = baseCompile(message, context); L4556: const msg = new Function(`return ${code2}`)(); L4557: return !detectError ? compileCache[cacheKey] = msg : msg;

Low

Eval

Package source references a known benign dynamic code generation pattern.

index-CtgqGX_c.jsView on unpkg · L4555

Source & flagged code

2 flagged · loading source

index-CtgqGX_c.jsView file

8348patternName = generic_password severity = medium line = 8348 matchedText = password...in",

Medium

Secret Pattern

Package contains a possible secret pattern.

index-CtgqGX_c.jsView on unpkg · L8348

4555const { code: code2, detectError } = baseCompile(message, context); L4556: const msg = new Function(`return ${code2}`)(); L4557: return !detectError ? compileCache[cacheKey] = msg : msg;

Low

Eval

Package source references a known benign dynamic code generation pattern.

index-CtgqGX_c.jsView on unpkg · L4555

Findings

3 Medium4 Low

MediumSecret Patternindex-CtgqGX_c.js

MediumNetwork

MediumEnvironment Vars

LowEvalindex-CtgqGX_c.js

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings