Loading npm security reports…
> 智能客服 / 智能体客户端 Vue 2 插件库。 > 通过 npm 包（`zj-plugin-intelligent`）方式发布，宿主项目引入后挂载全局组件 `ZjkjIntelligent`，提供 AI 会话、TokUI 动态表单、文件上传、语音交互等能力。
No confirmed malicious attack surface was established. The user-activated chat component dynamically loads a vendor-hosted browser helper, which is a supply-chain trust dependency rather than evidence of malicious behavior in this package.
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
lib/.gzView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/ZjPluginIntelligent.common.jsView on unpkgOpening the chat component loads a JavaScript helper from the vendor CDN at runtime.
lib/ZjPluginIntelligent.common.jsView on unpkg · L80This report applies to zj-plugin-intelligent@1.2.12.
See version security history for other recorded verdicts.
Evidence last updated: .
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
lib/.gzView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/ZjPluginIntelligent.common.jsView on unpkgOpening the chat component loads a JavaScript helper from the vendor CDN at runtime.
lib/ZjPluginIntelligent.common.jsView on unpkg · L80