registry / vue2-client / 1.22.37

vue2-client@1.22.37

基于Vue Antd Admin封装的通用基础组件

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 39 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 306 file(s), 4.72 MB of source, external domains: 127.0.0.1, 192.168.50.67, blog.stevenlevithan.com, countrycode.org, developer.mozilla.org, docs.microsoft.com, dvv.fi, en.wikipedia.org, github.com, gw.alipayobjects.com, iczer.gitee.io, it.wikipedia.org, no.wikipedia.org, paulirish.com, requirejs.org, semver.org, stackoverflow.com, t0.tianditu.gov.cn, tools.ietf.org, webrd02.is.autonavi.com, webst01.is.autonavi.com, webst02.is.autonavi.com, www.antdv.com, www.baidu.com, www.bitstorm.org, www.gtin.info, www.iana.org, www.irs.gov, www.isin.org, www.w3.org

Oversized source lightweight scan

public/his/editor/vender/editor.js2.50 MB file, sampled 256 KB

EvalHighEntropyStringsMinifiedUrlStringswww.w3.org

Source & flagged code

30 flagged

.envView file

14patternName = blocked_file severity = critical matchedText = .env redactedSecretContext = secretLikeLines = 2 L14: VUE_APP_DIVISIONSOHCHINA=<redacted:22 token-like> L16: VUE_APP_WEB_STYLES_KEY=<redacted:21 token-like>

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg · L14

public/his/editor/vender/jquery/jquery.ztree.core.min.jsView file

Lines 1-1javascript

1!function($){var settings={},roots={},caches={},_consts={className:{BUTTON:"button",LEVEL:"level",ICO_LOADING:"ico_loading",SWITCH:"switch",NAME:"node_name"},event:{NODECREATED:"ztree_nodeCreated",CLICK:"ztree_click",EXPAND:"ztree_expand",COLLAPSE:"ztree_collapse",ASYNC_SUCCESS:"ztree_async_success",ASYNC_ERROR:"ztree_async_error",REMOVE:"ztree_remove",SELECTED:"ztree_selected",UNSELECTED:"ztree_unselected"},id:{A:"_a",ICON:"_ico",SPAN:"_span",SWITCH:"_switch",UL:"_ul"},line:{ROOT:"root",ROOTS:"roots",CENTER:"center",BOTTOM:"bottom",NOLINE:"noline",LINE:"line"},folder:{OPEN:"open",CLOSE:"close ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

public/his/editor/vender/jquery/jquery.ztree.core.min.jsView on unpkg · L1

Long lines were clipped for display.

jest.config.jsView file

Lines 1-21javascript

1const path = require('path')

2require('dotenv').config({ path: path.resolve(__dirname, '.env') })

Medium

Dynamic Require

Package source references dynamic require/import behavior.

jest.config.jsView on unpkg · L1

4module.exports = {

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView file

•path = .claude/skills/af-vue2-client-maintainer/scripts/lint-check.sh kind = payload_in_excluded_dir sizeBytes = 737 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView on unpkg

•path = .claude/skills/af-vue2-client-maintainer/scripts/lint-check.sh kind = build_helper sizeBytes = 737 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView on unpkg

src/assets/ttf/JetBrainsMono-Light.woff2View file

•path = src/assets/ttf/JetBrainsMono-Light.woff2 kind = high_entropy_blob sizeBytes = 93856 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/assets/ttf/JetBrainsMono-Light.woff2View on unpkg

public/his/editor/vender/editor.jsView file

•path = public/his/editor/vender/editor.js kind = oversized_source_file sizeBytes = 2617908 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

public/his/editor/vender/editor.jsView on unpkg

test/v3Api.test.jsView file

Lines 901-1099javascript

901

902 const { runLogic } = require('@vue2-client/services/api/common')

903 runLogic.mockResolvedValue(mockResponse)

904

905 await searchToListOption(params, (res) => console.log(res))

906 })

907})

test/request.test.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = password...测试',

Medium

Secret Pattern

Hardcoded password in test/request.test.js

test/request.test.jsView on unpkg · L8

Source & flagged code

30 flagged · loading source

.envView file

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg · L14

public/his/editor/vender/jquery/jquery.ztree.core.min.jsView file

1!function($){var settings={},roots={},caches={},_consts={className:{BUTTON:"button",LEVEL:"level",ICO_LOADING:"ico_loading",SWITCH:"switch",NAME:"node_name"},event:{NODECREATED:"zt...

Low

Eval

Package source references a known benign dynamic code generation pattern.

public/his/editor/vender/jquery/jquery.ztree.core.min.jsView on unpkg · L1

jest.config.jsView file

1const path = require('path') L2: require('dotenv').config({ path: path.resolve(__dirname, '.env') })

Medium

Dynamic Require

Package source references dynamic require/import behavior.

jest.config.jsView on unpkg · L1

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView file

•path = .claude/skills/af-vue2-client-maintainer/scripts/lint-check.sh kind = payload_in_excluded_dir sizeBytes = 737 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView on unpkg

•path = .claude/skills/af-vue2-client-maintainer/scripts/lint-check.sh kind = build_helper sizeBytes = 737 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/af-vue2-client-maintainer/scripts/lint-check.shView on unpkg

src/assets/ttf/JetBrainsMono-Light.woff2View file

•path = src/assets/ttf/JetBrainsMono-Light.woff2 kind = high_entropy_blob sizeBytes = 93856 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/assets/ttf/JetBrainsMono-Light.woff2View on unpkg

public/his/editor/vender/editor.jsView file

•path = public/his/editor/vender/editor.js kind = oversized_source_file sizeBytes = 2617908 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

public/his/editor/vender/editor.jsView on unpkg

test/v3Api.test.jsView file

921patternName = generic_password severity = medium line = 921 matchedText = password...**',

Medium

Secret Pattern