home / campaigns / npm / zengyue // publisher campaign · npm
zengyue All caught packages published by the zengyue account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.
catch events
15
versions × names
blast
6.9K/wk
combined weekly downloads
active span
2026-05-19 → 2026-05-19
first → last catch
// publisher osint Account-level signals. Activity span tells you how long this handle has been around (fresh = throwaway-prone). Email domains separate single-use webmail from real org addresses. Cross-ecosystem handles + GitHub links are the strongest attribution pivot — same name on multiple registries usually means same operator.
activity on npm
packages on registry: 10 first publish: 2014-01-28latest publish: 2025-06-19active span: 4160demail domains
qq.com×105 webmail gmail.com×75 webmail 163.com×30 webmail outlook.com×15 webmail antgroup.com×15
yunji.me@outlook.com
also on 5 packages from 1 other publisher:
943720372@qq.com
also on 5 packages from 1 other publisher:
jinke.li666@gmail.com
also on 5 packages from 1 other publisher:
120635640@qq.com
also on 5 packages from 1 other publisher:
emails
yunji.me@outlook.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm 943720372@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm jinke.li666@gmail.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm 120635640@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm army8735@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm dengfuping_private@163.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm // pattern footprint Static-analysis flags that fired across the campaign, with how many packages each touched. Use as the "what kind of stealer is this" answer.
○ Charts for mobile visualization.
2025-06-19 ○ 2023-08-24 ○ 2023-06-29 ○
// packages in this campaign 15 distinct · newest first ↳ author: sima.zhang1990@gmail.com maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry ↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry ↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry army8735@qq.com
also on 5 packages from 1 other publisher:
dengfuping_private@163.com
also on 5 packages from 1 other publisher:
afc163@gmail.com
also on 5 packages from 1 other publisher:
chenluuli@gmail.com
also on 5 packages from 1 other publisher:
1175863618@qq.com
also on 5 packages from 1 other publisher:
1491812683@qq.com
also on 5 packages from 1 other publisher:
zhuyuxin0627@gmail.com
also on 5 packages from 1 other publisher:
ojh496845051@gmail.com
also on 5 packages from 1 other publisher:
wzwahl36@qq.com
also on 5 packages from 1 other publisher:
610999886@qq.com
also on 5 packages from 1 other publisher:
alex_zjt@163.com
also on 5 packages from 1 other publisher:
duxinyue.dxy@antgroup.com
also on 5 packages from 1 other publisher:
afc163@gmail.com
— @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
chenluuli@gmail.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
1175863618@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
1491812683@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
zhuyuxin0627@gmail.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
ojh496845051@gmail.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
wzwahl36@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
610999886@qq.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
alex_zjt@163.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm
duxinyue.dxy@antgroup.com — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/wx-f2, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm author names
https://github.com/orgs/antvis/people — @antv/f2-vue, @antv/f2, @antv/my-f2-pc, @antv/f2-wordcloud, @antv/my-f2, @antv/f2-wx, @antv/f2-react, @antv/f2-site, @antv/f2-graphic, @antv/f-charts, @antv/f2-my, @antv/f2-context, @antv/f-test-utils, @antv/f2-algorithm FEngine 是 AntV F 系列可视化引擎的底层渲染引擎，为移动端提供了一套完整的渲染、事件、动画能力，能方便的构建可视化 UI
2023-06-29
○ F2 for webchart miniprogram
2019-12-12 / npm / 2025-11-10 / MAL-2026-3889
@antv/f2@5.14.0 by zengyue
Charts for mobile visualization.
→ sends to https://f2.antv.vision/
reads-env-vars
→ No suspicious destination, no remote-exec shape — 6 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-10-28 / MAL-2026-3899
@antv/f2-wx@4.0.51 by zengyue
F2 for weixin mini-program
child-process-spawn
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2025-11-10 / MAL-2026-3898
@antv/f2-wordcloud@5.14.0 by zengyue
F2 wordcloud extension
→ sends to https://f2.antv.vision/zh/
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-10-28 / MAL-2026-3897
@antv/f2-vue@4.0.33 by zengyue
F2 for Vue.js
→ sends to https://f2.antv.vision/zh/docs/tutorial/vue
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-02-01 / MAL-2026-3896
@antv/f2-site@4.0.42 by zengyue
→ sends to https://github.com/antvis/f2
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2025-11-10 / MAL-2026-3895
@antv/f2-react@5.14.0 by zengyue
F2 for React
→ sends to https://f2.antv.vision/zh/docs/tutorial/react
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-10-28 / MAL-2026-3894
@antv/f2-my@4.0.52 by zengyue
F2 for alipay mini-program
child-process-spawn
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-09-06 / MAL-2026-3893
@antv/f2-graphic@0.0.16 by zengyue
→ sends to https://github.com/antvis/f2
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2020-01-13 / MAL-2026-3892
@antv/f2-context@0.0.1 by zengyue
F2针对多端的context适配
→ sends to https://github.com/antvis/f2-contex
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2024-10-09 / MAL-2026-3890
@antv/f2-algorithm@5.7.0 by zengyue
F2 algorithm extension
→ sends to https://f2.antv.vision/zh/
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2023-09-11 / MAL-2026-3886
@antv/f-test-utils@1.0.9 by zengyue
FEngine for Test
→ sends to https://f2.antv.vision
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2022-06-24 / MAL-2026-3881
@antv/f-charts@0.0.0 by zengyue
→ sends to https://github.com/antvis/FEngine
→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com> ↗ registry / npm / 2020-08-27 / MAL-2026-4097
@antv/wx-f2@2.1.1 by zengyue
F2 for weixin mini-program
child-process-spawn
→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s).
/ npm / 2021-12-29 / MAL-2026-4070
@antv/my-f2@2.1.7 by zengyue
F2 for alipay mini-program
child-process-spawn
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
/ npm / 2020-04-08 / MAL-2026-4071
@antv/my-f2-pc@0.1.1 by zengyue
F2 for alipay mini-program
child-process-spawn
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
