Cremit
/incidentsfield log
CatchesCampaignsExfilPatternsLLMIncidentsMethodology
↺rss↗cremit.io

incidents.cremit.io

A reference feed of real-world Non-Human Identity (NHI) credential leak incidents. Maintained by Cremit.

Browse

  • All incidents
  • npm supply chain
  • CI/CD compromise
  • Methodology

Subscribe

  • RSS feed
  • @cremit_io
  • GitHub
// status
monitor active
// build
2026-07-17
// origin
cremit · seoul, kr
// license
CC BY 4.0

© 2026 Cremit. content reuse encouraged with attribution.

home/campaigns/npm/newbyvector

// publisher campaign · npm

newbyvector

All caught packages published by the newbyvector account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.

↗npmjs.com publisher↗pypi.org user
packages
20
distinct names
catch events
20
versions × names
blast
68K/wk
combined weekly downloads
active span
2026-05-19 → 2026-05-19
first → last catch

// publisher osint

Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.

activity on npm
  • packages on registry: 27
  • first publish: 2023-03-09
  • latest publish: 2026-04-22
  • active span: 1140d
same handle on other registries
  • npm /~newbyvector: exists ↗
  • pypi /user/newbyvector: exists ↗
  • github.com/newbyvector: exists ↗
email domains
  • qq.com×140webmail
  • gmail.com×114webmail
  • 163.com×40webmail
  • outlook.com×20webmail
  • antgroup.com×20
  • 126.com×1webmail

// exfil path

what is read → where it ships
steals
  • ○ clipboard
→
sends to

(no destination string extracted — payload may be dynamic / obfuscated)

Targets resolved from static-analysis flags; destinations extracted from the captured code excerpt. Full list + structured fields available in the IOC panel below.

// cross-publisher email signals

An email from this campaign also appears on caught packages under a different publisher account. Strong evidence that one operator runs both handles.

  • yunji.me@outlook.com
    also on 5 packages from 1 other publisher:
    • by
    • by
    • by
    • by
    • by
  • 943720372@qq.com
    also on 5 packages from 1 other publisher:
    • by
    • by
    • by
    • by
    • by
  • jinke.li666@gmail.com
    also on 5 packages from 1 other publisher:
    • by
    • by
    • by
    • by
    • by
  • 120635640@qq.com
    also on 5 packages from 1 other publisher:

// shared author identifiers

Same email or author name on more than one package — direct attribution evidence beyond the shared publisher account.

emails
  • yunji.me@outlook.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • 943720372@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • jinke.li666@gmail.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • 120635640@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common

// pattern footprint

Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.

  • ×17
  • ×3
  • ×1
  • ×1

// full activity on npm

Every package this account currently has on the registry, newest first. ● caught by our pipeline · ○ not yet flagged.0/27 caught.

  • ○
    @secretflow/x-spu@ 0.1.0-g02ac612-b20260422073741413666

    SecretFlow documentation build artifacts

    2026-04-22
  • ○
    @secretflow/x-yacl@ 0.1.0-gd3d19f3-b20260414082007880966

    SecretFlow documentation build artifacts

    2026-04-14
  • ○
    @secretflow/x-scql@ 0.1.0-g8107675-b20260318075310159126

    SecretFlow documentation build artifacts

    2026-03-18
  • ○
    @secretflow/x-kuscia

// packages in this campaign

20 distinct · newest first
  • ↳ author:maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • ↳ author:maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • ↳ author:maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • npm/@antv/l7-mapsby lzxue
  • npm/@antv/l7by lzxue
  • npm/@antv/l7-layersby lzxue
  • npm/@antv/l7-coreby lzxue
  • npm/@antv/l7-componentby lzxue
  • army8735@qq.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • dengfuping_private@163.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • afc163@gmail.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • chenluuli@gmail.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • 1175863618@qq.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • 1491812683@qq.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • zhuyuxin0627@gmail.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • ojh496845051@gmail.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • wzwahl36@qq.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • 610999886@qq.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • alex_zjt@163.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • duxinyue.dxy@antgroup.com
    also on 5 packages from 1 other publisher:
    • npm/@antv/l7-mapsby lzxue
    • npm/@antv/l7by lzxue
    • npm/@antv/l7-layersby lzxue
    • npm/@antv/l7-coreby lzxue
    • npm/@antv/l7-componentby lzxue
  • army8735@qq.com
    — @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • dengfuping_private@163.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • afc163@gmail.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • chenluuli@gmail.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • 1175863618@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • 1491812683@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • zhuyuxin0627@gmail.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • ojh496845051@gmail.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • wzwahl36@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • 610999886@qq.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • alex_zjt@163.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • duxinyue.dxy@antgroup.com— @antv/x6-plugin-transform, @antv/xflow-diff, @antv/x6-react-components, @antv/x6-vector, @antv/xflow, @antv/xflow-hook, @antv/xflow-extension, @antv/xflow-core, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry, @antv/x6-common
  • bubkoo.wy@gmail.com— @antv/x6-plugin-transform, @antv/x6-react-components, @antv/x6-vector, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry
  • author names
    • bubkoo— @antv/x6-plugin-transform, @antv/x6-react-components, @antv/x6-vector, @antv/x6-plugin-stencil, @antv/x6-plugin-snapline, @antv/x6-plugin-selection, @antv/x6-plugin-scroller, @antv/x6-plugin-keyboard, @antv/x6-plugin-minimap, @antv/x6-plugin-history, @antv/x6-plugin-export, @antv/x6-plugin-dnd, @antv/x6-plugin-clipboard, @antv/x6-geometry
    @ 0.1.0-gc04279a-b20260312064150815253

    SecretFlow documentation build artifacts

    2026-03-12
  • ○
    @secretflow/x-psi@ 0.1.0-gd768270-b20260304063401019025

    SecretFlow documentation build artifacts

    2026-03-04
  • ○
    @secretflow/x-heu@ 0.1.0-gca1f3d5-b20251125081528068065

    SecretFlow documentation build artifacts

    2025-11-25
  • ○
    @secretflow/x-secretflow@ 0.1.0-g11425fa-b20251113065724050097

    SecretFlow documentation build artifacts

    2025-11-13
  • ○
    @secretflow/x-docs@ 0.1.0-gb4ec003-b20250905095520723140

    SecretFlow documentation build artifacts

    2025-09-05
  • ○
    @secretflow/x-spec@ 0.1.0-gcf2b6c4-b20250806092646558633

    SecretFlow documentation build artifacts

    2025-08-06
  • ○
    @secretflow/x-serving@ 0.1.0-gd8167b6-b20250801062745101778

    SecretFlow documentation build artifacts

    2025-08-01
  • ○
    @secretflow/x-secretpad@ 0.1.0-g128ccd3-b20250725060555438585

    SecretFlow documentation build artifacts

    2025-07-25
  • ○
    @secretflow/x-interconnection@ 0.1.0-g09b0ecc-b20250721034120572103

    SecretFlow documentation build artifacts

    2025-07-21
  • ○
    @secretflow/x-trustedflow@ 0.0.4-g660da60-b202412270932064750

    Build artifacts for secretflow/trustedflow

    2024-12-27
  • ○
    @secretflow/secretnote-lite@ 0.0.5
    2024-07-18
  • ○
    @secretflow/x-easy-psi@ 0.0.4-g02b5762-b202405291039293300

    Build artifacts for secretflow/easy-psi

    2024-05-29
  • ○
    @secretflow/dumi-plugin-search@ 0.6.1

    Better search for Dumi

    2024-01-30
  • ○
    @secretflow/dumi-theme-sphinx-mdx@ 0.6.6

    Dumi theme for SecretFlow's documentation.

    2024-01-30
  • ○
    @secretflow/unified-toolkit@ 0.4.0

    Suite of unified plugins and tools for processing Markdown documents using Dumi.

    2024-01-29
  • ○
    @secretflow/dumi-plugin-yuque@ 0.3.0

    在 Dumi 中使用语雀导出的 HTML 文件作为文档。

    2024-01-29
  • ○
    @secretflow/dumi-plugin-mdx@ 0.3.0

    Dumi plugin to enable compiling .mdx files.

    2024-01-29
  • ○
    @secretflow/openapi@ 0.0.1-alpha.9
    2024-01-08
  • ○
    @secretflow/dumi-mdx-loader-core@ 0.2.0

    Use proper .mdx files in Dumi.

    2023-09-05
  • ○
    @secretflow/lint-staged-config@ 1.0.0

    Shared lint-staged config for SecretFlow

    2023-03-09
  • ○
    @secretflow/husky-hooks@ 1.0.0

    Shared husky hooks for SecretFlow

    2023-03-09
  • ○
    @secretflow/commitlint-config@ 1.0.0

    Shared commitlint config for SecretFlow

    2023-03-09
  • ○
    @secretflow/eslint-config@ 1.0.0

    Shared eslint config for SecretFlow

    2023-03-09
  • ○
    @secretflow/semantic-release-config@ 1.0.0

    Sharable configuration for semantic-release, extends experience for publishing to NPM & Github

    2023-03-09
  • ↳ author:
    maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>
    ↗ registry
  • AUTO-PUBLISHED/npm/2023-04-06/MAL-2026-4119

    @antv/xflow-core@1.0.55

    by newbyvector

    ## Getting Started

    clipboard-access

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    32K
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    patterns
    1
    size
    ↳ author:maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2022-10-13/MAL-2026-4115

    @antv/x6-vector@1.4.2

    by newbyvector

    Lightweight library for manipulating and animating SVG.

    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    patterns
    1
    size
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2025-04-20/MAL-2026-4113

    @antv/x6-react-components@2.0.9

    by newbyvector

    React components for building x6 editors

    → sends tohttps://x6.antv.antgroup.com
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-10-02/MAL-2026-4111

    @antv/x6-plugin-transform@2.1.8

    by newbyvector

    transform plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/transform
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    3.7K
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2024-01-10/MAL-2026-4110

    @antv/x6-plugin-stencil@2.1.5

    by newbyvector

    stencil plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/stencil
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-04-12/MAL-2026-4109

    @antv/x6-plugin-snapline@2.1.7

    by newbyvector

    snapline plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/snapline
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2024-01-24/MAL-2026-4108

    @antv/x6-plugin-selection@2.2.2

    by newbyvector

    selection plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/selection
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-07-11/MAL-2026-4107

    @antv/x6-plugin-scroller@2.0.10

    by newbyvector

    scroller plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/scroller
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2024-01-24/MAL-2026-4106

    @antv/x6-plugin-minimap@2.0.7

    by newbyvector

    minimap plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/minimap
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2024-01-24/MAL-2026-4105

    @antv/x6-plugin-keyboard@2.2.3

    by newbyvector

    keyboard plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/keyboard
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    4.2K
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-10-02/MAL-2026-4104

    @antv/x6-plugin-history@2.2.4

    by newbyvector

    history plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/history
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-04-12/MAL-2026-4103

    @antv/x6-plugin-export@2.1.6

    by newbyvector

    export plugin for X6.

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/export
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    3.1K
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-09-19/MAL-2026-4102

    @antv/x6-plugin-dnd@2.1.1

    by newbyvector

    dnd plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/dnd
    public-github-push

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-04-12/MAL-2026-4101

    @antv/x6-plugin-clipboard@2.1.6

    by newbyvector

    clipboard plugin for X6

    → sends tohttps://x6.antv.antgroup.com/tutorial/plugins/clipboard
    public-github-pushclipboard-access

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2023-04-12/MAL-2026-3840

    @antv/x6-geometry@2.0.5

    by newbyvector

    Geometry operations for X6

    → sends tohttps://x6.antv.antgroup.com
    public-github-push

    → No suspicious destination, no remote-exec shape — 2 known-vendor host(s), 1 other host(s).

    weekly
    13K
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    ↳ author:bubkoo<bubkoo.wy@gmail.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • AUTO-PUBLISHED/npm/2024-01-10/MAL-2026-4099

    @antv/x6-common@2.0.17

    by newbyvector

    Basic toolkit for X6

    → sends tohttps://x6.antv.antgroup.com
    public-github-pushchild-process-spawnbase64-decode

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    12K
    /wk
    llm verdict
    benign 0.85
    ↳ author:newbyvector<vectorse@126.com>maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>↗ registry
  • npm/@antv/l7-maps
    lzxue
    npm/@antv/l7
    lzxue
    npm/@antv/l7-layers
    lzxue
    npm/@antv/l7-core
    lzxue
    npm/@antv/l7-component
    lzxue
    npm/@antv/l7-maps
    lzxue
    npm/@antv/l7
    lzxue
    npm/@antv/l7-layers
    lzxue
    npm/@antv/l7-core
    lzxue
    npm/@antv/l7-component
    lzxue
    npm/@antv/l7-maps
    lzxue
    npm/@antv/l7
    lzxue
    npm/@antv/l7-layers
    lzxue
    npm/@antv/l7-core
    lzxue
    npm/@antv/l7-component
    lzxue
    public-github-push
    clipboard-access
    child-process-spawn
    base64-decode
    AUTO-PUBLISHED/npm/2024-10-28/MAL-2026-4118

    @antv/xflow@2.2.4

    by newbyvector

    [English (US)](README.md) | 简体中文

    public-github-pushclipboard-access

    → No suspicious destination, no remote-exec shape — 15 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    patterns
    2
    size
    4.1 MB
    versions
    103
    AUTO-PUBLISHED/npm/2023-04-06/MAL-2026-4122

    @antv/xflow-hook@1.0.55

    by newbyvector

    ## Getting Started

    → sends tohttps://registry.npmjs.org

    → No suspicious destination, no remote-exec shape — 2 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    size
    125.5 KB
    versions
    82
    AUTO-PUBLISHED/npm/2023-04-06/MAL-2026-4121

    @antv/xflow-extension@1.0.55

    by newbyvector

    ## Getting Started

    → sends tohttps://registry.npmjs.org

    → No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    size
    4.1 MB
    versions
    83
    AUTO-PUBLISHED/npm/2023-11-21/MAL-2026-4120

    @antv/xflow-diff@1.0.0

    by newbyvector

    English (US) | [简体中文](README.zh-Hans.md)

    → sends tohttps://github.com/antvis/XFlow/issues
    public-github-push

    → No suspicious destination, no remote-exec shape — 2 known-vendor host(s).

    weekly
    —
    /wk
    llm verdict
    benign 0.85
    h-score
    75
    patterns
    1
    size
    67.1 KB
    versions
    1
    2.9 MB
    versions
    82
    5.7 MB
    versions
    16
    75
    patterns
    1
    size
    900.1 KB
    versions
    41
    75
    patterns
    1
    size
    183.5 KB
    versions
    11
    75
    patterns
    1
    size
    234.9 KB
    versions
    8
    75
    patterns
    1
    size
    162.8 KB
    versions
    12
    75
    patterns
    1
    size
    304.3 KB
    versions
    21
    75
    patterns
    1
    size
    287.6 KB
    versions
    27
    75
    patterns
    1
    size
    76.2 KB
    versions
    8
    75
    patterns
    1
    size
    60.7 KB
    versions
    18
    75
    patterns
    1
    size
    155.5 KB
    versions
    10
    75
    patterns
    1
    size
    73.3 KB
    versions
    9
    75
    patterns
    1
    size
    89.4 KB
    versions
    11
    h-score
    75
    patterns
    2
    size
    60.9 KB
    versions
    11
    patterns
    1
    size
    1.5 MB
    versions
    25
    h-score
    75
    patterns
    3
    size
    1.9 MB
    versions
    32