registry  /  x_ele_plus  /  1.1.82

x_ele_plus@1.1.82

<!-- 获取当前源 npm config get registry 设置当前源 npm config set registry <https://registry.npmjs.org>

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 18 file(s), 226 KB of source, external domains: www.w3.org

Source & flagged code

2 flagged · loading source
README.mdView file
16patternName = npm_token severity = critical line = 16 matchedText = npm conf... -->
Critical
Critical Secret

Package contains a critical-looking secret pattern.

README.mdView on unpkg · L16
16patternName = npm_token severity = critical line = 16 matchedText = npm conf... -->
Critical
Secret Pattern

npm access token in README.md

README.mdView on unpkg · L16

Findings

2 Critical2 Medium4 Low
CriticalCritical SecretREADME.md
CriticalSecret PatternREADME.md
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License