// publisher campaign · npm
All caught packages published by the moayuisuda account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.
Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.
An email from this campaign also appears on caught packages under a different publisher account. Strong evidence that one operator runs both handles.
Same email or author name on more than one package — direct attribution evidence beyond the shared publisher account.
Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.
Every package this account currently has on the registry, newest first. ● caught by our pipeline · ○ not yet flagged.2/20 caught.
AntV website theme based on dumi2.
MCP Server for AntV visualization libraries development, which provides documentation context and examples for visualization developers.
Terminal chart renderer with G2 spec support
the Grammar of Graphics in Javascript
A core module for rendering engine implements DOM API.
Visualization components for AntV, based on G.
An interactive and responsive charting library
Support SSR for G2
Toolkit for mapping abstract data into visual representation.
<h1 align="center">@antv/util</h1>
> TODO: description
The mark plot in antv/g2
## :tophat: Get any chord/scale/scaleChords you want. ### More info in https://moayuisuda.github.io/chord.js/
Toolkit for mapping elements of sets into geometric objects.
UI components for AntV G.
[moa-flow-doc.vercel.app](https://moa-flow-doc.vercel.app/)
event emitter for antvis.
Graceful line made by noise.
the Grammar of Graphics in Javascript
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
Visualization components for AntV, based on G.
→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s).
