// publisher 캠페인 · npm
npm의 bubkoo 계정이 publish한 catch 패키지 전체와, registry가 현재 노출하는 author·maintainer 정보. 같은 이메일이나 이름이 여러 패키지에 걸쳐 등장하면, 한 명이 여러 throwaway 계정을 운영한다는 강한 증거입니다.
이 계정 자체에 대한 시그널. 활동 기간이 짧으면 throwaway 가능성이 큽니다. 이메일 도메인을 보면 단발 webmail인지 진짜 조직 메일인지 한눈에 갈리고, 같은 핸들이 여러 registry에 있으면 같은 운영자라고 볼 강한 근거가 됩니다. GitHub 링크가 잡히면 실명 식별까지 곧장 이어집니다.
이 캠페인의 이메일이 다른 publisher 계정의 catch 패키지에도 등장하는 경우. 한 운영자가 두 계정을 같이 굴리고 있다는 강한 증거입니다.
같은 이메일·이름이 캠페인 안 여러 패키지에 등장하는 경우. publisher 계정 외에 별도로 잡히는 직접적인 attribution 증거입니다.
캠페인 전반에서 어떤 정적 분석 플래그가 얼마나 자주 매칭됐는지. "이 캠페인이 결국 어떤 종류의 stealer인가"에 대한 요약 답.
이 계정이 지금 registry에 올려둔 모든 패키지 (최신순). ● Cremit 파이프라인이 catch · ○ 아직 미검출.0/250 catch (registry 총 285개 중 250개만 표시).
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
Define and run shared scripts of a monorepo using Yarn workspaces, Bolt, Lerna or pnpm
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
SecretFlow documentation build artifacts
Generates an image from a DOM node using HTML5 canvas and SVG.
Build artifacts for secretflow/trustedflow
Shared eslint config for my projects
Shared husky hooks for my projects
Shared tsconfig for my projects
Shared stylelint config for my projects
Sharable configuration for semantic-release, extends experience for publishing to NPM & Github
Shared rollup config for my projects
Shared prettier config for my projects
Shared lint-staged config for my projects
Shared jest config for my projects
Shared commitlint config for my projects
Build artifacts for secretflow/easy-psi
Better search for Dumi
Dumi theme for SecretFlow's documentation.
Suite of unified plugins and tools for processing Markdown documents using Dumi.
在 Dumi 中使用语雀导出的 HTML 文件作为文档。
Dumi plugin to enable compiling .mdx files.
Use proper .mdx files in Dumi.
Shared husky hooks for SecretFlow
Shared commitlint config for SecretFlow
Shared eslint config for SecretFlow
Sharable configuration for semantic-release, extends experience for publishing to NPM & Github
Apply semantic-release's automatic publishing to a monorepo
Utility method to parse action's inputs
Abbreviate number to a more human-friendly format (3.6K, 6.8M, etc.)
Find the root directory of a monorepo using Yarn workspaces, Bolt, Lerna or pnpm
Given a name and a list of names that are not equal to the name, return a spelling suggestion if there is one that is close enough.
A GitHub App to save/update it's installation token to the secrets of current repo. Then we can use the token in our workflows.
Generate textures with svg path
Generate textures with svg circle
Ascii progress-bar(s) in the terminal.
ansi escape sequences for terminal cursor positioning and coloring
Get the cursor's current position in your terminal.
Convert text to svg path.
Visualize regular expression with railroad diagram
Parse regular expression to ast tree
Generate 365dots svg
Apply semantic-release's automatic publishing to a monorepo
Apply semantic-release's automatic publishing to a monorepo
Sharable configuration for semantic-release, extends experience for publishing Github Actions
Sharable configuration for semantic-release, extends experience for publishing Github Actions
Javascript natural sort algorithm with unicode support.
Inject a model loader function into mickey with hmr support.
Bundle mickey based app with umi
Set system proxy for mac and windows platform.
A progress indicator in tray for your Electron app.
Extract i18n message files and replace text with i18n-formatter.
Lightweight front-end framework for creating React and Redux based app painlessly.
I18n client work with babel-plugin-mickey-i18n-scanner
Validate models shipped by mickey to avoid certain syntax pitfalls.
Build and dev-debug tool for react apps
Command line utility for mickey
A React table component designed to allow presenting millions of rows of data.
Utility method to extend mickey model.
Simple Todo application with mickey
Ascii progress-bar(s) in the terminal.
Hmr babel plugin for mickey.
Insert a markdown TOC(Table Of Content) before posts be rendered.
A collection awesome badges.
Generate UML sequence diagrams for Hexo.
Generate flowchart diagrams for Hexo.
Extend syntax for the native fenced code block.
Generate superscript (`<sup>`) tag for Hexo.
Generate subscript (`<sub>`) tag for Hexo
JavaScript diagramming library
Generate a random full name.
Generate a random full name.
Create version mapping for your static files.
Create boxes in the terminal
Set system proxy for mac and windows platform.
Set userAgent before do fetch, this module is a middleware for fetch-client.
Set content-type before do fetch and parse the result to XML, this module is a middleware for fetch-client.
A convenient fetch client with middleware support.
Convert the given dataURL to a Blob.
Generate random colors based on the golden ratio, which are more visually pleasing.
Return random file name with random extension.
Return a normally-distributed random variate.
Return a random hex hash.
Return a value equal to the roll of a die.
Return a random uuid.
Return a random semver.
Return an array of dice values.
Returns a single item from an array with relative weighting of odds.
Return a random string.
Generate a random date.
Return am or pm. Very simple.
Generate a random millisecond.
Generate a random second.
Generate a random minute.
Generate a random hour.
Generate a random day.
Generate a random weekday.
Generate a random month.
Generate a random timestamp.
Generate a random year.
Generate a random last name.
Generate a random first name.
Generate a random birthday.
Generate a random age.
Generate a random (U.S.) zip code.
Generate a random (U.S.) mobile phone number.
Generate a random (U.S.) area code.
Return a random language name.
Return a random country.
Generate a random geojson.
Generate a random geohash.
Generate a random coordinates, which are latitude and longitude, comma separated.
Generate a random latitude.
Generate a random longitude.
Generate a random depth, in meters. Depths are always negative.
Generate a random altitude, in meters.
Return a URL to a random avatar from Gravatar.
Return a random ipv6 address.
Return a random ipv4 address.
Return a random url.
Return a random hashtag.
Return a random protocol.
Return a random email address.
Return a random domain.
Return a random tld(Top Level Domain).
Given an object, pick some random key-values and return it in a new object.
Given an object, pick a random key-value and return it in a new object.
Given an object, pick some random properties and return them in an array.
Given an object, pick a random property and return it.
Given an object, pick a random key and return it.
Given an object, pick a random key and return it.
Given an array, pick some random elements and return them in a new array.
Given an array, pick a random element and return it.
Return a random paragraph generated from sentences populated by semi-pronounceable random (nonsense) words.
Return a random title populated by semi-pronounceable random (nonsense) words.
Return a random sentence populated by semi-pronounceable random (nonsense) words.
Return a semi-pronounceable random (nonsense) word.
Return a semi-speakable syllable, 2 or 3 letters.
Return a random hexadecimal number.
Return a random unicode.
Return a random octal number.
Return a random binary number.
Return a random array-like index.
Return a random floating point number.
Return a random decimal.
Return a random character.
Return a random boolean value (true or false).
Return a natural number.
Return a random integer.
List of languages of the world.
Converts a number into a string, keeping a specified number of decimals.
Return the maximum length of array in JavaScript.
Return the maximum integer in JavaScript.
Return the maximum safe integer in JavaScript.
随机生成一个中国的手机号码
随机返回一个（中国）市。
随机返回一个（中国）省（或直辖市、自治区、特别行政区）。
随机返回一个（中国）大区。
Utility library to generate anything random, with more Chinese localization.
Javascript utilities for generating random data.
Compile template to mock date.
Generate a random ID.
Generate a svg logo, then you can embed it in you README.md
Fetch daily quote from http://www.brainyquote.com
Hijacks NodeJS Stream and emits events when newline(s) written to the output.
Convert color between a variety of formats.
A list of all valid top-level domains and is updated from time to time.
Randomize the order of the elements in array or array-like object.
Returns a function that will only be executed after being called N times.
Restrict the given function only be invoked once. Repeat calls to the function return the value of the first invocation.
Returns a function that will only be executed before being called N times.
Attempts to invoke the given function, returning either the result or the caught error object.
Checks if path is a direct property of object.
Removes the property at path of object.
Sets the value at path of object.
Converts value to an integer suitable for use as the length of an array-like object.
ES7 spec-compliant String.prototype.padEnd shim.
Determines whether a string begins with the characters of another string.
ES spec-compliant String.prototype.padStart shim.
Converts the given value to an integer.
Converts string, as a whole, to lower case.
Converts the given value to a number.
Converts string, as a whole, to upper case.
Get object's property according to the path.
Converts string to a property path array.
Creates a slice of array with n elements dropped from the beginning.
Determines whether a string ends with the characters of another string.
Creates a slice of array with n elements dropped from the end.
Checks if the given value is null.
Checks if the given value is a valid array-like index.
Checks if the given value is a window object.
Checks if the given value is null or undefined
Checks if the given value is a valid array-like length.
Checks if the given value is an array or array-like object.
Checks if the given value is a native function.
Converts function to its source code.
A faster alternative to `Function#apply`.
Converts the given value to a string.
Removes leading whitespace or specified characters from string.
Load runtime configuration files for your module.
Polyfill for Array.prototype.copyWithin.
Wrap content with a box in the terminal.
some presets for boxup
Break string into lines according to visual width
Generate license files for your projects.
A mock server returning random JSON from schema.
UI Components
A mock server returning random JSON from schema.
Generate random JSON(plain old object) from the given template
Javascript utilities for generating random data.
Compile underscore templates into JavaScript files.
Source line of codes plugin for Grunt
Create seajs config file with json file
X6 shape for rendering vue3 components.
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
