// publisher campaign · npm
All caught packages published by the yiqianyao account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.
Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.
An email from this campaign also appears on caught packages under a different publisher account. Strong evidence that one operator runs both handles.
Same email or author name on more than one package — direct attribution evidence beyond the shared publisher account.
Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.
Every package this account currently has on the registry, newest first. ● caught by our pipeline · ○ not yet flagged.0/12 caught.
A react library developed with dumi
A javascript library for multi-touch gestures
Browser-side SDF font generator
- 详细文档 https://github.com/antvis/L7-CustomLayer-Template/tree/master/docs/template%20api
. 自定义改造 regl 使之兼容小程序环境 - 处理兼容动态函数 - l7eval5 Function.apply - 数据纹理参数取值为空 - gl.getParamter(...) - 兼容事件注册 context_lost、restore - canvas.addEventListener - 增加对 webgl 扩展验证的支持 - gl.getExtension(...) - 增加对小程序环境 imageData、canvas 的判断 - isPixelData、isAliMiniCanvas
## Getting Started
中文 | [English](./README-en_US.md)
轻量级场景渲染器
## Getting Started
log test
