// publisher campaign · npm
All caught packages published by the bubkoo account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.
Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.
An email from this campaign also appears on caught packages under a different publisher account. Strong evidence that one operator runs both handles.
Same email or author name on more than one package — direct attribution evidence beyond the shared publisher account.
Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.
Every package this account currently has on the registry, newest first. ● caught by our pipeline · ○ not yet flagged.0/250 caught (registry reports 285, showing first 250).
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
Define and run shared scripts of a monorepo using Yarn workspaces, Bolt, Lerna or pnpm
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
Generates an image from a DOM node using HTML5 canvas and SVG.
Build artifacts for secretflow/trustedflow
Shared eslint config for my projects
Shared husky hooks for my projects
Shared tsconfig for my projects
Shared stylelint config for my projects
Sharable configuration for semantic-release, extends experience for publishing to NPM & Github
Shared rollup config for my projects
Shared prettier config for my projects
Shared lint-staged config for my projects
Shared jest config for my projects
Shared commitlint config for my projects
Build artifacts for secretflow/easy-psi
Better search for Dumi
Dumi theme for SecretFlow's documentation.
Suite of unified plugins and tools for processing Markdown documents using Dumi.
在 Dumi 中使用语雀导出的 HTML 文件作为文档。
Dumi plugin to enable compiling .mdx files.
Use proper .mdx files in Dumi.
Shared husky hooks for SecretFlow
Shared commitlint config for SecretFlow
Shared eslint config for SecretFlow
Sharable configuration for semantic-release, extends experience for publishing to NPM & Github
Apply semantic-release's automatic publishing to a monorepo
Utility method to parse action's inputs
Abbreviate number to a more human-friendly format (3.6K, 6.8M, etc.)
Find the root directory of a monorepo using Yarn workspaces, Bolt, Lerna or pnpm
Given a name and a list of names that are not equal to the name, return a spelling suggestion if there is one that is close enough.
A GitHub App to save/update it's installation token to the secrets of current repo. Then we can use the token in our workflows.
Generate textures with svg path
Generate textures with svg circle
Ascii progress-bar(s) in the terminal.
ansi escape sequences for terminal cursor positioning and coloring
Get the cursor's current position in your terminal.
Convert text to svg path.
Visualize regular expression with railroad diagram
Parse regular expression to ast tree
Generate 365dots svg
Apply semantic-release's automatic publishing to a monorepo
Apply semantic-release's automatic publishing to a monorepo
Sharable configuration for semantic-release, extends experience for publishing Github Actions
Sharable configuration for semantic-release, extends experience for publishing Github Actions
Javascript natural sort algorithm with unicode support.
Inject a model loader function into mickey with hmr support.
Bundle mickey based app with umi
Set system proxy for mac and windows platform.
A progress indicator in tray for your Electron app.
Extract i18n message files and replace text with i18n-formatter.
Lightweight front-end framework for creating React and Redux based app painlessly.
I18n client work with babel-plugin-mickey-i18n-scanner
Validate models shipped by mickey to avoid certain syntax pitfalls.
Build and dev-debug tool for react apps
Command line utility for mickey
A React table component designed to allow presenting millions of rows of data.
Utility method to extend mickey model.
Simple Todo application with mickey
Ascii progress-bar(s) in the terminal.
Hmr babel plugin for mickey.
Insert a markdown TOC(Table Of Content) before posts be rendered.
A collection awesome badges.
Generate UML sequence diagrams for Hexo.
Generate flowchart diagrams for Hexo.
Extend syntax for the native fenced code block.
Generate superscript (`<sup>`) tag for Hexo.
Generate subscript (`<sub>`) tag for Hexo
JavaScript diagramming library
Generate a random full name.
Generate a random full name.
Create version mapping for your static files.
Create boxes in the terminal
Set system proxy for mac and windows platform.
Set userAgent before do fetch, this module is a middleware for fetch-client.
Set content-type before do fetch and parse the result to XML, this module is a middleware for fetch-client.
A convenient fetch client with middleware support.
Convert the given dataURL to a Blob.
Generate random colors based on the golden ratio, which are more visually pleasing.
Return random file name with random extension.
Return a normally-distributed random variate.
Return a random hex hash.
Return a value equal to the roll of a die.
Return a random uuid.
Return a random semver.
Return an array of dice values.
Returns a single item from an array with relative weighting of odds.
Return a random string.
Generate a random date.
Return am or pm. Very simple.
Generate a random millisecond.
Generate a random second.
Generate a random minute.
Generate a random hour.
Generate a random day.
Generate a random weekday.
Generate a random month.
Generate a random timestamp.
Generate a random year.
Generate a random last name.
Generate a random first name.
Generate a random birthday.
Generate a random age.
Generate a random (U.S.) zip code.
Generate a random (U.S.) mobile phone number.
Generate a random (U.S.) area code.
Return a random language name.
Return a random country.
Generate a random geojson.
Generate a random geohash.
Generate a random coordinates, which are latitude and longitude, comma separated.
Generate a random latitude.
Generate a random longitude.
Generate a random depth, in meters. Depths are always negative.
Generate a random altitude, in meters.
Return a URL to a random avatar from Gravatar.
Return a random ipv6 address.
Return a random ipv4 address.
Return a random url.
Return a random hashtag.
Return a random protocol.
Return a random email address.
Return a random domain.
Return a random tld(Top Level Domain).
Given an object, pick some random key-values and return it in a new object.
Given an object, pick a random key-value and return it in a new object.
Given an object, pick some random properties and return them in an array.
Given an object, pick a random property and return it.
Given an object, pick a random key and return it.
Given an object, pick a random key and return it.
Given an array, pick some random elements and return them in a new array.
Given an array, pick a random element and return it.
Return a random paragraph generated from sentences populated by semi-pronounceable random (nonsense) words.
Return a random title populated by semi-pronounceable random (nonsense) words.
Return a random sentence populated by semi-pronounceable random (nonsense) words.
Return a semi-pronounceable random (nonsense) word.
Return a semi-speakable syllable, 2 or 3 letters.
Return a random hexadecimal number.
Return a random unicode.
Return a random octal number.
Return a random binary number.
Return a random array-like index.
Return a random floating point number.
Return a random decimal.
Return a random character.
Return a random boolean value (true or false).
Return a natural number.
Return a random integer.
List of languages of the world.
Converts a number into a string, keeping a specified number of decimals.
Return the maximum length of array in JavaScript.
Return the maximum integer in JavaScript.
Return the maximum safe integer in JavaScript.
随机生成一个中国的手机号码
随机返回一个（中国）市。
随机返回一个（中国）省（或直辖市、自治区、特别行政区）。
随机返回一个（中国）大区。
Utility library to generate anything random, with more Chinese localization.
Javascript utilities for generating random data.
Compile template to mock date.
Generate a random ID.
Generate a svg logo, then you can embed it in you README.md
Fetch daily quote from http://www.brainyquote.com
Hijacks NodeJS Stream and emits events when newline(s) written to the output.
Convert color between a variety of formats.
A list of all valid top-level domains and is updated from time to time.
Randomize the order of the elements in array or array-like object.
Returns a function that will only be executed after being called N times.
Restrict the given function only be invoked once. Repeat calls to the function return the value of the first invocation.
Returns a function that will only be executed before being called N times.
Attempts to invoke the given function, returning either the result or the caught error object.
Checks if path is a direct property of object.
Removes the property at path of object.
Sets the value at path of object.
Converts value to an integer suitable for use as the length of an array-like object.
ES7 spec-compliant String.prototype.padEnd shim.
Determines whether a string begins with the characters of another string.
ES spec-compliant String.prototype.padStart shim.
Converts the given value to an integer.
Converts string, as a whole, to lower case.
Converts the given value to a number.
Converts string, as a whole, to upper case.
Get object's property according to the path.
Converts string to a property path array.
Creates a slice of array with n elements dropped from the beginning.
Determines whether a string ends with the characters of another string.
Creates a slice of array with n elements dropped from the end.
Checks if the given value is null.
Checks if the given value is a valid array-like index.
Checks if the given value is a window object.
Checks if the given value is null or undefined
Checks if the given value is a valid array-like length.
Checks if the given value is an array or array-like object.
Checks if the given value is a native function.
Converts function to its source code.
A faster alternative to `Function#apply`.
Converts the given value to a string.
Removes leading whitespace or specified characters from string.
Load runtime configuration files for your module.
Polyfill for Array.prototype.copyWithin.
Wrap content with a box in the terminal.
some presets for boxup
Break string into lines according to visual width
Generate license files for your projects.
A mock server returning random JSON from schema.
UI Components
A mock server returning random JSON from schema.
Generate random JSON(plain old object) from the given template
Javascript utilities for generating random data.
Compile underscore templates into JavaScript files.
Source line of codes plugin for Grunt
Create seajs config file with json file
X6 shape for rendering vue3 components.
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
