@zmtcdn/ui - npm Package Compare versions
New alerts
Known malware
Supply chain riskThis package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.
Found 2 instances
Install scripts
Supply chain riskInstall scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.
Network access
Supply chain riskThis module accesses the network.
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Improved metrics
- Total package byte prevSize
813
144.88%- Number of package files
3
50%- Lines of code
21
Infinity%- Number of low quality alerts
2
-33.33%Worsened metrics
- Number of medium quality alerts
1
Infinity%- Number of lines in readme file
0
-100%- Number of critical supply chain risk alerts
2
Infinity%- Number of high supply chain risk alerts
1
Infinity%- Number of low supply chain risk alerts
3
200%