Loading npm security reports…
> 智能客服 / 智能体客户端 Vue 2 插件库。 > 通过 npm 包（`zj-plugin-intelligent`）方式发布，宿主项目引入后挂载全局组件 `ZjkjIntelligent`，提供 AI 会话、TokUI 动态表单、文件上传、语音交互等能力。
At browser runtime, a server-marked encrypted response can cause the bundle to fetch and execute a remote script. The script URL is fixed but has no integrity pinning.
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/ZjPluginIntelligent.common.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
lib/ZjPluginIntelligent.common.jsView on unpkg · L33Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
lib/lib.zipView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
lib/.gzView on unpkgA package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.
lib/ZjPluginIntelligent.umd.min.jsView on unpkgThis report applies to zj-plugin-intelligent@1.2.18.
See version security history for other recorded verdicts.
Evidence last updated: .
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/ZjPluginIntelligent.common.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
lib/ZjPluginIntelligent.common.jsView on unpkg · L33Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
lib/lib.zipView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
lib/.gzView on unpkgA package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.
lib/ZjPluginIntelligent.umd.min.jsView on unpkg