atool — npm publisher 캠페인 | Cremit · NHI Credential Stealer Index
home / campaigns / npm / atool // publisher 캠페인 · npm
atool npm의 atool 계정이 publish한 catch 패키지 전체와, registry가 현재 노출하는 author·maintainer 정보. 같은 이메일이나 이름이 여러 패키지에 걸쳐 등장하면, 한 명이 여러 throwaway 계정을 운영한다는 강한 증거입니다.
활동 기간
2026-05-19 → 2026-05-19
최초 → 최근 탐지
🚨 critical signal OSV advisory — Externally validated by MAL-2026-4159
Across 45 caught packages: 45/45 OSV-validated.
npm 활동
registry 패키지 수: 250 최초 publish: 2017-09-16최근 publish: 2026-10-10활동 기간: 3311일다른 registry의 같은 핸들
npm /~atool: 존재함 ↗ pypi /user/atool: 존재함 ↗ github.com/atool: 존재함 ↗ 이메일 도메인
qq.com×107 webmail gmail.com×67 webmail hust.cc×29 163.com×27 webmail outlook.com×13 webmail alibaba-inc.com // exfil path what is read → where it ships steals
● Chromium logins○ clipboardsends to
(no destination string extracted — payload may be dynamic / obfuscated)
wzwahl36@qq.com
also on 5 packages from 1 other publisher:
yunji.me@outlook.com
also on 5 packages from 1 other publisher:
943720372@qq.com
also on 5 packages from 1 other publisher:
jinke.li666@gmail.com
also on 5 packages from 1 other publisher:
emails
i@hust.cc — timeago.js, ribbon.js, uri-parse, slice.js, xmorse, word-width, onfire.js, react-adsense, mcp-mermaid, limit-size, miz, lint-md, lint-md-cli, mcp-echarts, jest-url-loader, jest-date-mock, jest-expect, jest-random-mock, jest-electron, fixed-round, gantt-for-react, echarts-for-react, byte-parser, filesize.js, boring-avatars-vanilla, babel-plugin-version, canvas-nest.js, ast-plugin, size-sensor wzwahl36@qq.com — jest-canvas-mock, amapcn, ai-figure, @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util yunji.me@outlook.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util 943720372@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util jinke.li666@gmail.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util 120635640@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util // 패턴 풋프린트 캠페인 전반에서 어떤 정적 분석 플래그가 얼마나 자주 매칭됐는지. "이 캠페인이 결국 어떤 종류의 stealer인가"에 대한 요약 답.
○ 2026-10-10 ○ A renderer implemented by Canvas 2D API
2026-10-10 ○ A declarative usage for G implemented with WebComponents
2026-10-10 ○
// 이 캠페인의 패키지 고유 이름 45개 · 최신순 ↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry ↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry ↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry ↳ author: hustcc maintainers: alizurchik <al.lizurchik@gmail.com>, atool <i@hust.cc> ↗ registry ↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry ↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry
×1
GitHub 링크 (package.json author.url에서 추출)
120635640@qq.com
also on 5 packages from 1 other publisher:
army8735@qq.com
also on 5 packages from 1 other publisher:
dengfuping_private@163.com
also on 5 packages from 1 other publisher:
afc163@gmail.com
also on 5 packages from 1 other publisher:
chenluuli@gmail.com
also on 5 packages from 1 other publisher:
1175863618@qq.com
also on 5 packages from 1 other publisher:
1491812683@qq.com
also on 5 packages from 1 other publisher:
zhuyuxin0627@gmail.com
also on 5 packages from 1 other publisher:
ojh496845051@gmail.com
also on 5 packages from 1 other publisher:
610999886@qq.com
also on 5 packages from 1 other publisher:
787982239@qq.com
also on 5 packages from 1 other publisher:
alex_zjt@163.com
also on 5 packages from 1 other publisher:
army8735@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
dengfuping_private@163.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
afc163@gmail.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
chenluuli@gmail.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
1175863618@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
1491812683@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
zhuyuxin0627@gmail.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
ojh496845051@gmail.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
610999886@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
787982239@qq.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util
alex_zjt@163.com — @antv/mcp-server-chart, @antv/torch, @antv/t8, @antv/gpt-vis, @antv/g6-ssr, @antv/gpt-vis-ssr, @antv/github-config-cli, @antv/g2-ssr, @antv/g2-extension-plot, @antv/event-emitter, @antv/g-perf, @antv/data-set, @antv/color-util author names
hustcc — timeago.js, ribbon.js, uri-parse, slice.js, xmorse, word-width, onfire.js, react-adsense, miz, lint-md, lint-md-cli, jest-canvas-mock, jest-date-mock, jest-expect, jest-random-mock, jest-electron, gantt-for-react, echarts-for-react, filesize.js, canvas-nest.js, ast-plugin, ai-figure, size-sensor antv — @antv/mcp-server-chart, @antv/t8, @antv/g-perf antvis — @antv/gpt-vis, @antv/gpt-vis-ssr aarebecca — @antv/g6-ssr, @antv/g2-ssr https://github.com/orgs/antvis/people — @antv/data-set, @antv/color-util @ 2.1.2
A G plugin of renderer implementation with Zdog
2026-10-10
○ A core module for rendering engine implements DOM API.
2026-10-10 ○ A G plugin for Gesture implemented with PointerEvents
2026-10-10 ○ A renderer implemented by SVG in mobile environment
2026-10-10 ○ A core module for rendering engine implements DOM API.
2026-10-10 ○ A renderer implemented with Canvas2D API in mobile environment
2026-10-10 ○ A renderer implemented by WebGPU
2026-10-10 ○ A G plugin for using CSS select syntax in query selector
2026-10-10 ○ A renderer implemented by WebGL1/2 in mobile environment
2026-10-10 ○ A renderer implemented by WebGL1/2
2026-10-10 ○ A G plugin of renderer implementation with GPUDevice
2026-10-10 ○ A G plugin for annotation
2026-10-10 ○ A G plugin of renderer implementation with rough.js
2026-10-10 ○ A G plugin for Yoga layout engine
2026-10-10 ○ A G plugin of renderer implementation with Zdog
2026-10-10 ○ A G plugin of renderer implementation with rough.js
2026-10-10 ○ A G plugin for matter.js physics engine
2026-10-10 ○ A G plugin for orbit control
2026-10-10 ○ A G plugin for Drag n Drop implemented with PointerEvents
2026-10-10 ○ A renderer implemented by CanvasKit
2026-10-10 ○ Provide 3D extension for G
2026-10-10 ○ A renderer implemented by SVG
2026-10-10 ○ A G plugin for accessibility
2026-10-10 ○ lint-md 的解析器，基于 remark 生态，将 Markdown 字符串转换成 AST
2026-09-29 ○ Core of lint-md which used to lint your markdown file for Chinese.
2026-09-26 ○ Visualization components for AntV, based on G.
2026-09-21 ● Components for GPTs, generative AI, and LLM projects. Not only UI Components.
2026-09-17 ○ Astro integration for static open-source documentation and examples
2026-09-15 ○ CLI tool to lint your markdown file for Chinese.
2026-09-13 ● T8 is a text visualization solution for unstructured data within the AntV technology stack, and it is a declarative T8 markdown syntax that can be used to describe the content of data interpretation reports.
2026-09-04 ○ An Infographic Generation and Rendering Framework, bring words to life!
2026-08-19 ○ AntV website theme based on dumi2.
2026-08-11 ○ JavaScript diagramming library that uses SVG and HTML for rendering
2026-08-11 ○ Chart visualization skills for AntV, can be used in various scenarios such as data analysis, business intelligence, and dashboard development. Skills and CLI are included.
2026-07-31 ○ A local context retrieval library that enables semantic search over your documentation. It loads documents (Markdown, JSON, Text), vectorizes them using [Transformers.js](https://huggingface.co/transformers.js), and stores vectors locally in `.zvec` files
2026-07-30 ○ L7's collection of built-in layers
2026-07-13 ○ A Large-scale WebGL-powered Geospatial Data Visualization
2026-07-13 ● Mock a canvas in your jest tests.
2026-07-09 ○ effective spreadsheet render core lib
2026-06-10 ● SSR(Server Side Render) for AntV GPT-Vis.
2026-05-27 ○ SVG-based data visualization style avatars from any username and color palette. Works in both browsers and Node.js.
2026-05-27 ○ A Graph Visualization Framework in JavaScript
2026-05-08 ● Boring avatars as a vanilla JavaScript library, SVG-based avatars from any username and color palette. Works in both browsers and Node.js server-side rendering.
2026-04-03 ○ Using React Component to Define Your G6 Graph Node
2026-03-30 ● A Model Context Protocol server for generating charts using AntV. This is a TypeScript-based MCP server that provides chart generation capabilities. It allows you to create various types of charts through MCP tools.
2026-02-25 ● ❤️ Generate mermaid diagram and chart with AI MCP dynamically.
2026-02-12 ● ❤️ Generate visual charts using Apache ECharts with AI MCP dynamically.
2026-01-30 ○ FEngine for weixin mini-program
2026-01-21 ○ FEngine for alipay mini-program
2026-01-21 ○ FEngine 是 AntV F 系列可视化引擎的底层渲染引擎，为移动端提供了一套完整的渲染、事件、动画能力，能方便的构建可视化 UI
2026-01-21 ● Apache Echarts components for React.
2026-01-21 ● DOM element size sensor which will callback when size changed.
2026-01-16 ○ the Grammar of Graphics in Javascript
2026-01-06 ○ layout algorithms for visualizing hierarchical data
2025-12-25 ○ A simple implementation of Web Animations API.
2025-12-12 ○ A G plugin of renderer implementation with SVG
2025-12-12 ○ A G plugin for picking in SVG
2025-12-12 ○ A G plugin listening events in mobile environment
2025-12-12 ○ A G plugin for loading image
2025-12-12 ○ A G plugin for rendering HTML
2025-12-12 ○ A G plugin of renderer implementation with CanvasKit
2025-12-12 ○ A G plugin for picking in canvas
2025-12-12 ○ A G plugin of renderer implementation with Canvas2D API
2025-12-12 ○ A G plugin of path generator with Canvas2D API
2025-12-12 ○ Create a CanvasLike element from existed context in mobile environment
2025-12-12 ○ A image exporter for G using DOM API
2025-12-12 ○ A simple implementation of DOM MutationObserver API.
2025-12-12 ○ A simple implementation of Camera API.
2025-12-12 ○ X6 shape for rendering angular components.
2025-12-01 ○ X6 shape for rendering vue components.
2025-12-01 ○ X6 shape for rendering react components.
2025-11-27 ○ Charts for mobile visualization.
2025-11-10 ○ An interactive and responsive charting library
2025-09-19 ○ Toolkit for mapping abstract data into visual representation.
2025-09-04 ○ <h1 align="center">@antv/util</h1>
2025-07-01 ○ analysis assets for location insight
2025-04-30 ○ core assets for location insight
2025-04-30 ○ editor for location insight
2025-04-30 ○ A React toolkit for graph analysis based on g6
2025-04-24 ○ Vendored dependencies to fix ERR_REQUIRE_ESM.
2025-04-21 ○ React components for building x6 editors
2025-04-20 ○ A Graph Visualization Framework in JavaScript
2025-04-11 ○ A Graph Visualization Framework in JavaScript
2025-04-11 ○ A secure, high-performance expression evaluator for dynamic chart rendering
2025-03-28 ○ timeago-react is a simple(only 1kb) react component used to format date with `*** time ago` statement. eg: '3 hours ago'.
2025-03-04 ○ SDK for Graph Insight Application
2024-12-05 ○ <h1 align="center"> <b>@antv/graphlib</b> </h1>
2024-11-27 ○ [English (US)](README.md) | 简体中文
2024-10-28 ○ A Device API references WebGPU implementations
2024-10-10 ○ A React toolkit for geospatial visualization based on L7
2024-09-14 ○ A WASM binding of rust implementation for graph layout algorithms.
2024-09-06 ○ graph layout algorithm implemented with GPGPU
2024-09-06 ○ Geospatial Visualization Chart Library
2024-07-15 ○ Composite layer for @antv/l7
2024-07-15 ○ A javascript library for multi-touch gestures
2024-06-23 ● Mock `window.Date` when run unit test cases with jest. Make tests of `Date` easier.
2024-04-21 ○ The [threed](https://github.com/antvis/G2/blob/v5/src/lib/std.ts) lib for G2.
2024-03-25 ○ A framework for automated visual analytics.
2024-03-15 ○ A common util collection for antv projects
2024-03-08 ● Mock `Math.random` when run unit test cases with jest, output deterministic random number.
2024-02-24 ○ the create CLI tool for G6VP assets
2024-01-03 ○ A Large-scale WebGL-powered Geospatial Data Visualization
2023-12-20 ○ Using React Component to Define Your G6 Graph Node
2023-12-13 ○ A Graph Visualization Framework in JavaScript
2023-12-12 ○ Toolkit for mapping elements of sets into geometric objects.
2023-11-23 ○ The auto and insight marks for @antv/g2, powered by @antv/ava.
2023-11-17 ○ F2 for weixin mini-program
2023-10-28 ○ F2 for alipay mini-program
2023-10-28 ○ An translator for markdown files
2023-09-27 ○ A G plugin implements GPUDevice interface with WebGL API
2023-09-11 ○ A G plugin implements GPUDevice interface with WebGPU API
2023-09-11 ○ A G plugin for GPGPU based on WebGPU
2023-09-11 ○ UI components for AntV G.
2023-08-29 ○ Shader components based on glslify
2023-06-27 ○ A simple implementation of CSS Typed OM API.
2023-05-24 ○ A simple implementation of CSS Layout API.
2023-05-24 ○ Geometry operations for X6
2023-04-12 ○ The Attribute module for G2, F2.
2023-03-23 ○ An empiric-driven chart recommendation js library.
2023-03-06 ○ A js/ts library for data processing
2023-03-06 ○ A Mobile Graph Visualization Framework in JavaScript
2023-01-18 ○ Jest transformer for .less file.
2023-01-09 ○ L7-React 已全面 升级为 LarkMap,不在进行维护 。 LarkMap 空间数据可视分析组件库
2022-12-22 ○ * implements render engine's interface with WebGPU/WebGL
2022-11-29 ○ * contains systems and components in ECS * root DI container implemented by inversify.js * export render engine's interface which will be implemented by WebGPU/WebGL in `@antv/g-webgpu-engine`
2022-11-29 ○ React component of interactive narrative text
2022-11-14 ○ @antv/x6-next @ 2.0.1-beta.2 JavaScript diagramming library that uses SVG and HTML for rendering.
2022-06-29 ○ A renderer implemented with Canvas2D API in mobile environment
2022-05-24 ○ A G plugin of renderer implementation with WebGL1
2022-05-09 ○ A compiler transpiling *.g to GLSL/WGSL
2022-05-09 ○ A common util collection for antv projects
2022-05-03 ○ Open data set collection for AntV products
2022-04-26 ○ Ant Visualization solution home page
2022-02-15 ● event emitter for antvis.
2022-02-10 ○ A common util collection for antv projects
2022-01-25 ○ The adjust module for G2, F2.
2022-01-23 ○ Thumbnails of Chart Types.
2021-11-20 ○ @antv/antv-spec @ 0.1.0-alpha.18 A declarative grammar that supports various technology stacks of AntV.
2021-11-19 ○ JSON Schema for Color Palette
2021-11-16 ● Easiest way to run jest unit test cases in electron.
2021-11-03 ○ A JavaScript library for color computation.
2021-09-07 ○ visualization predict engine
2021-06-01 ○ The simplest abstract syntax tree walker.
2021-03-23 ● Generate mock data, just like a person.
2021-02-02 ● data set with state management
2021-02-01 ○ The Chart Toolkit of G6 Graph Node
2021-01-25 ● A common util collection for antv projects
2020-12-21 ○ A common util collection for antv projects
2020-12-21 ● Lightweight, Convenient, Fast command tool to control your file size, size-limit is too bloated.
2020-10-16 ● Parse byte string to byte number, e.g. 1.2 Kb -> 1228.8, Kb, Mb, Gb, Tb, Pb, Eb, Zb, Yb supported.
2020-09-15 ○ The Calendar heatmap implemented by G2.
2020-08-01 ● xmorse is a pure javascript(~1.5 kb) library for encode / decode morse code messages, unicode supported.
2020-02-13 ● Cli tool to lint your markdown file for Chinese.
2019-12-27 ● timeago.js is a simple library (only 1kb) to used to format datetime with `*** time ago` statement. eg: '3 hours ago'. localization supported.
2019-12-21 ● Similar with webpack's url-loader for Jest.
2019-12-13 ○ npm package name robbery.
2019-10-17 ● filesize.js is a simple browserjs / nodejs library to make filesize human-readable.
2019-10-10 ● Core of lint-md which used to lint your markdown file for Chinese.
2019-07-26 ● A Simple React component for Google AdSense and Baidu advertisement.
2019-06-05 ● onfire.js is a mini (~500 b) version for event-emitter.
2019-04-22 ○ Yet another JS code coverage tool that computes statement, line, function and branch coverage with module loader hooks to transparently add coverage when running tests. Supports all JS coverage use cases including unit tests, server side functional tests
2019-04-02 ● The simplest abstract syntax tree walker.
2018-12-30 ○ A datazoom slider plugin for G2.
2018-12-10 ● A nest backgroud of website draw on canvas use javascript, do not depends on jQuery.
2018-12-06 ● babel plugin replace define Identifier / StringLiteral `__VERSION__` to pkg.version!
2018-11-26 ● Math.round with fixed, formats a number using fixed-point notation and returns a number.
2018-08-26 ○ interaction plugins for AntV products
2018-08-02 ● Frappe Gantt components for React wrapper.
2018-08-01 ○ Javascript Matrix and Vector library for High Performance WebGL apps
2018-07-23 ○ net visualization framework
2018-04-09 ● nano version for slice of string and array like Python.
2018-03-10 ○ Select a one-, two-dimensional or irregular region using the mouse.
2017-12-15 ○ Generate fake / mock structured variable.
2017-09-16 ↳ author:
hustcc
maintainers: atool <i@hust.cc>
🚨 OSV advisory / npm / 2019-06-05 / MAL-2026-4150
react-adsense@0.1.0 by atool
A Simple React component for Google AdSense and Baidu advertisement.
→ sends to https://github.com/hustcc/react-adsense.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2019-04-22 / MAL-2026-4149
onfire.js@2.0.1 by atool
onfire.js is a mini (~500 b) version for event-emitter.
→ sends to https://atool.vip/
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2021-02-02 / MAL-2026-4148
miz@1.0.1 by atool
Generate mock data, just like a person.
→ sends to https://github.com/hustcc/miz.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-02-12 / MAL-2026-4147
mcp-mermaid@0.4.1 by atool
❤️ Generate mermaid diagram and chart with AI MCP dynamically.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-01-30 / MAL-2026-4146
mcp-echarts@0.7.1 by atool
❤️ Generate visual charts using Apache ECharts with AI MCP dynamically.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2019-07-26 / MAL-2026-4144
lint-md@0.2.0 by atool
Core of lint-md which used to lint your markdown file for Chinese.
→ sends to https://github.com/hustcc/lint-md/issues
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2019-12-27 / MAL-2026-4145
lint-md-cli@0.1.2 by atool
Cli tool to lint your markdown file for Chinese.
→ sends to https://github.com/hustcc/lint-md/issues
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2020-10-16 / MAL-2026-4143
limit-size@0.1.4 by atool
Lightweight, Convenient, Fast command tool to control your file size, size-limit is too bloated.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2019-12-13 / MAL-2026-4142
jest-url-loader@0.1.0 by atool
Similar with webpack's url-loader for Jest.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2024-02-24 / MAL-2026-4141
jest-random-mock@1.0.0 by atool
Mock `Math.random` when run unit test cases with jest, output deterministic random number.
→ sends to https://github.com/hustcc/jest-random-mock.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2018-04-26 / MAL-2026-4139
jest-expect@0.0.1 by atool
Make jest expect more convenient.
→ sends to https://github.com/hustcc/jest-expect.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2021-11-03 / MAL-2026-4138
jest-electron@0.1.12 by atool
Easiest way to run jest unit test cases in electron.
public-github-push reads-env-vars child-process-spawn
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-05-19 / MAL-2026-4137
jest-date-mock@1.0.11 by atool
Mock `window.Date` when run unit test cases with jest. Make tests of `Date` easier.
→ sends to https://github.com/hustcc/jest-date-mock.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-05-19 / MAL-2026-4136
jest-canvas-mock@2.5.3 by atool
Mock a canvas in your jest tests.
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: jtenner <tenner.joshua@gmail.com>, atool <wzwahl36@qq.com> ↗ registry 🚨 OSV advisory / npm / 2018-08-01 / MAL-2026-4135
gantt-for-react@0.2.0 by atool
Frappe Gantt components for React wrapper.
→ sends to https://github.com/hustcc/gantt-for-react.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc>, xskkk1777 <xskkk1777@163.com> ↗ registry 🚨 OSV advisory / npm / 2018-08-26 / MAL-2026-4134
fixed-round@1.0.2 by atool
Math.round with fixed, formats a number using fixed-point notation and returns a number.
→ sends to https://github.com/TCharts/fixed-round.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: ProtoTeam maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2019-10-10 / MAL-2026-4133
filesize.js@2.0.0 by atool
filesize.js is a simple browserjs / nodejs library to make filesize human-readable.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-05-19 / MAL-2026-4132
echarts-for-react@3.0.7 by atool
Apache Echarts components for React.
→ sends to https://github.com/hustcc/echarts-for-react.git
public-github-push reads-env-vars
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2018-12-06 / MAL-2026-4131
canvas-nest.js@2.0.4 by atool
A nest backgroud of website draw on canvas use javascript, do not depends on jQuery.
→ sends to https://github.com/hustcc
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2020-09-15 / MAL-2026-3846
byte-parser@1.0.0 by atool
Parse byte string to byte number, e.g. 1.2 Kb -> 1228.8, Kb, Mb, Gb, Tb, Pb, Eb, Zb, Yb supported.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 4 other host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-04-03 / MAL-2026-4130
boring-avatars-vanilla@1.0.2 by atool
Boring avatars as a vanilla JavaScript library, SVG-based avatars from any username and color palette. Works in both browsers and Node.js server-side rendering.
→ sends to http://www.w3.org/2000/svg
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2018-11-26 / MAL-2026-4129
babel-plugin-version@0.2.3 by atool
babel plugin replace define Identifier / StringLiteral `__VERSION__` to pkg.version!
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2018-12-30 / MAL-2026-4128
ast-plugin@0.0.7 by atool
The simplest abstract syntax tree walker.
→ sends to https://github.com/hustcc/ast-plugin.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: hustcc maintainers: atool <i@hust.cc> ↗ registry 🚨 OSV advisory / npm / 2026-05-18 / MAL-2026-4127
amapcn@0.1.2 by atool
An AMap (高德地图)-powered map component library for React, styled with Tailwind CSS.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 3 known-vendor host(s).
↳ author: maintainers: atool <wzwahl36@qq.com> ↗ registry 🚨 OSV advisory / npm / 2026-04-28 / MAL-2026-4126
ai-figure@0.4.0 by atool
Generate clean SVG diagrams (flowchart, tree, architecture, sequence) from a JSON config. Auto-layout, zero coordinates, works in browser and Node.js.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
↳ author: hustcc maintainers: atool <wzwahl36@qq.com> ↗ registry 🚨 OSV advisory / npm / 2019-09-05 / MAL-2026-4090
@antv/torch@1.0.6 by atool
torchjs for @antv.
steals → Chromium logins
reads-chromium-creds reads-env-vars child-process-spawn
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: wensen.lws <wensen.lws@alibaba-inc.com> maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2026-01-31 / MAL-2026-4087
@antv/t8@0.3.0 by atool
T8 is a text visualization solution for unstructured data within the AntV technology stack, and it is a declarative T8 markdown syntax that can be used to describe the content of data interpretation reports.
clipboard-access
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: AntV maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2026-02-25 / MAL-2026-4069
@antv/mcp-server-chart@0.9.10 by atool
A Model Context Protocol server for generating charts using AntV. This is a TypeScript-based MCP server that provides chart generation capabilities. It allows you to create various types of charts through MCP tools.
→ sends to https://registry.npmjs.org/
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: AntV maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2026-04-29 / MAL-2026-4020
@antv/gpt-vis@1.0.0 by atool
Components for GPTs, generative AI, and LLM projects. Not only UI Components.
→ sends to https://gpt-vis.antv.vision
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: antvis maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2026-04-28 / MAL-2026-4021
@antv/gpt-vis-ssr@0.3.7 by atool
SSR(Server Side Render) for AntV GPT-Vis.
→ sends to https://gpt-vis.antv.vision
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: antvis maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2025-08-13 / MAL-2026-4018
@antv/github-config-cli@0.1.0 by atool
CLI for AntV's shared GitHub templates and workflows.
→ sends to https://github.com/antvis/github-config
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
↳ author: yvonneyx maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2025-09-15 / MAL-2026-3996
@antv/g6-ssr@0.1.1 by atool
Support SSR for G6
→ sends to https://registry.npmjs.org/
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: Aarebecca maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2025-09-15 / MAL-2026-3979
@antv/g2-ssr@0.2.0 by atool
Support SSR for G2
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: Aarebecca maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2025-03-26 / MAL-2026-3977
@antv/g2-extension-plot@0.2.2 by atool
The mark plot in antv/g2
→ sends to https://github.com/antvis/g2-extensions.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2019-07-18 / MAL-2026-3930
@antv/g-perf@1.0.0 by atool
Performance monitor for G.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: antv maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2022-02-10 / MAL-2026-3879
@antv/event-emitter@0.1.3 by atool
event emitter for antvis.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2021-02-01 / MAL-2026-3868
@antv/data-set@0.11.8 by atool
data set with state management
→ sends to https://github.com/zeke/euclidean-distance
child-process-spawn
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2020-12-21 / MAL-2026-3862
@antv/color-util@2.0.6 by atool
A common util collection for antv projects
→ sends to https://github.com/antvis/util.git
public-github-push child-process-spawn
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, pearl_wang <610999886@qq.com>, interstellarmt <787982239@qq.com>, alex_zjt <alex_zjt@163.com> ↗ registry 🚨 OSV advisory / npm / 2020-02-13 / MAL-2026-4159
xmorse@1.0.0 by atool
xmorse is a pure javascript(~1.5 kb) library for encode / decode morse code messages, unicode supported.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
🚨 OSV advisory / npm / 2017-06-05 / MAL-2026-4158
word-width@1.0.1 by atool
word-width is simple browserjs / nodejs library for calculate ascii length of unicode string in terminal / console.
→ sends to http://git.hust.cc/word-width
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s).
🚨 OSV advisory / npm / 2020-06-13 / MAL-2026-4157
uri-parse@1.0.0 by atool
Mini data-uri parser for nodejs and browser. No dependencies!
→ sends to https://github.com/hustcc/uri-parse.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
🚨 OSV advisory / npm / 2019-12-21 / MAL-2026-4156
timeago.js@4.0.2 by atool
timeago.js is a simple library (only 1kb) to used to format datetime with `*** time ago` statement. eg: '3 hours ago'. localization supported.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
🚨 OSV advisory / npm / 2018-03-10 / MAL-2026-4154
slice.js@1.1.1 by atool
nano version for slice of string and array like Python.
→ sends to https://github.com/hustcc/slice.js.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
🚨 OSV advisory / npm / 2026-05-19 / MAL-2026-4153
size-sensor@1.0.4 by atool
DOM element size sensor which will callback when size changed.
→ sends to https://github.com/hustcc/size-sensor.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
🚨 OSV advisory / npm / 2018-05-26 / MAL-2026-4152
ribbon.js@1.0.2 by atool
only 1kb javascript gist to generate a ribbon in your website with HTML5 canvas.
→ sends to http://aibq.cn/
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 known-vendor host(s), 1 other host(s).
0.85
0.85
0.85
0.85
