AUTO-PUBLISHED/npm//MAL-2026-4025
@antv/graphin-icons@1.0.0
by pomelo-nwu
graphin icon fonts
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
size
75.0 KB
versions
1
// publisher campaign · npm
All caught packages published by the pomelo-nwu account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.
Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.
An email from this campaign also appears on caught packages under a different publisher account. Strong evidence that one operator runs both handles.
Same email or author name on more than one package — direct attribution evidence beyond the shared publisher account.
Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.
Every package this account currently has on the registry, newest first. ● caught by our pipeline · ○ not yet flagged.0/64 caught.
Base channel infrastructure for Qwen Code
Qwen Code - AI-powered coding assistant
Native microphone capture backend for Qwen Code voice input
TypeScript SDK for programmatic access to qwen-code CLI
Mobile MCP with opt-in relative coordinate support
Cross-platform Computer Use MCP server launcher. After install, configure open-computer-use mcp.
A reference channel plugin for Qwen Code. It connects to a WebSocket server and routes messages through the full channel pipeline (access control, session routing, agent bridge).
A universal documentation translator for any GitHub project. Instantly translate docs with AI and automatically build a Nextra-based documentation site.
Shared UI components for Qwen Code packages
Qwen Code Core
Neug Query - A standalone query interface for GraphScope
A data querying module in GraphStudio, supporting Cypher and Gremlin statements
## Quick Start
## Development
Default configuration for claude-code-router with DashScope support
A tool to automatically setup fetch MCP and configure global CLAUDE.md for Claude Code in enterprise environments
Default configuration for claude-code-router with DashScope support
一个基于 ReactFlow 的流程图编辑器组件，提供图形化编辑、节点管理、边连接等功能。
A web-based tool for querying CSV files using DuckDB
A state management for React
A data modeling and import module in GraphStudio
A components for graphscope studio
A React toolkit for graph analysis based on g6
Experiment draw pattern code for GrapeScope
- warning: 目前还没有对 `Table-Node` 进行 `API` 支持。
A library provides a unified interface for interacting with graph databases
OpenAPI client for GraphScope Studio
Graph Apps
G6VP Assets for TuGraph-DB
JavaScript Gremlin Language Variant
多应用管理插件，Openpiece 默认会内置该插件。
fork by Nocobase.
## Register
The official graphin theme of dumi
A GraphScope Jupyter Extension, including Graphin Widget, etc.
CLI for DPAY.JS powered by payTeam
React UI library based on Pay.css
A simple search components it's UI just like google search
watermark components for React
payui for react
react-codemirror-pay based on react and codemirror
graphin icon fonts
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
G6VP public data
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
G6VP MOCK DATA
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).