home / campaigns / npm / openwayne // publisher 캠페인 · npm
openwayne npm의 openwayne 계정이 publish한 catch 패키지 전체와, registry가 현재 노출하는 author·maintainer 정보. 같은 이메일이나 이름이 여러 패키지에 걸쳐 등장하면, 한 명이 여러 throwaway 계정을 운영한다는 강한 증거입니다.
활동 기간
2026-05-19 → 2026-05-19
최초 → 최근 탐지
npm 활동
registry 패키지 수: 8 최초 publish: 2018-07-12최근 publish: 2024-12-24활동 기간: 2357일다른 registry의 같은 핸들
npm /~openwayne: 존재함 ↗ pypi /user/openwayne: 존재함 ↗ github.com/openwayne: 존재함 ↗ 이메일 도메인
qq.com×66 webmail gmail.com×56 webmail 163.com×22 webmail outlook.com×11 webmail antgroup.com×11 126.com×11 webmail // exfil path what is read → where it ships sends to
(no destination string extracted — payload may be dynamic / obfuscated)
yunji.me@outlook.com
also on 5 packages from 1 other publisher:
943720372@qq.com
also on 5 packages from 1 other publisher:
jinke.li666@gmail.com
also on 5 packages from 1 other publisher:
120635640@qq.com
also on 5 packages from 1 other publisher:
emails
yunji.me@outlook.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay 943720372@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay jinke.li666@gmail.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay 120635640@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay army8735@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay dengfuping_private@163.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay afc163@gmail.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay chenluuli@gmail.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay // 패턴 풋프린트 캠페인 전반에서 어떤 정적 분석 플래그가 얼마나 자주 매칭됐는지. "이 캠페인이 결국 어떤 종류의 stealer인가"에 대한 요약 답.
○ 2024-12-24 ○ 2022-11-03 ○ 2022-07-08 ○
// 이 캠페인의 패키지 고유 이름 11개 · 최신순 ↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry ↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry ↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry
army8735@qq.com
also on 5 packages from 1 other publisher:
dengfuping_private@163.com
also on 5 packages from 1 other publisher:
afc163@gmail.com
also on 5 packages from 1 other publisher:
chenluuli@gmail.com
also on 5 packages from 1 other publisher:
1175863618@qq.com
also on 5 packages from 1 other publisher:
1491812683@qq.com
also on 5 packages from 1 other publisher:
zhuyuxin0627@gmail.com
also on 5 packages from 1 other publisher:
ojh496845051@gmail.com
also on 5 packages from 1 other publisher:
wzwahl36@qq.com
also on 5 packages from 1 other publisher:
alex_zjt@163.com
also on 5 packages from 1 other publisher:
duxinyue.dxy@antgroup.com
also on 5 packages from 1 other publisher:
mrwang1212@126.com
also on 5 packages from 1 other publisher:
1175863618@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
1491812683@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
zhuyuxin0627@gmail.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
ojh496845051@gmail.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
wzwahl36@qq.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
alex_zjt@163.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
duxinyue.dxy@antgroup.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay
mrwang1212@126.com — @antv/g6-wx, @antv/g6-mobile, @antv/g6-alipay, @antv/f6-ui, @antv/f6, @antv/f6-wx, @antv/f6-hammerjs, @antv/f6-plugin, @antv/f6-core, @antv/f6-element, @antv/f6-alipay author names
https://github.com/orgs/antvis/people — @antv/g6-mobile, @antv/f6-ui, @antv/f6, @antv/f6-plugin, @antv/f6-core, @antv/f6-element A javascript library for multi-touch gestures
2021-06-06
○ 小程序版AntUI-按需fix版本(0.4.27)
2019-07-29 ↳ author:
https://github.com/orgs/antvis/people
maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com>
AUTO-PUBLISHED/ npm / 2023-01-18 / MAL-2026-3907
@antv/f6-wx@0.0.7 by openwayne
微信小程序f6组件
steals → Apple/CloudKit
reads-apple-cloudkit child-process-spawn function-constructor
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2022-03-30 / MAL-2026-3906
@antv/f6-ui@1.0.3 by openwayne
UI system for @antv/f6
→ sends to https://github.com/antvis/F6.git
public-github-push child-process-spawn
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2022-03-30 / MAL-2026-3905
@antv/f6-plugin@1.0.6 by openwayne
F6 plugin
→ sends to https://github.com/antvis/F6.git
public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2024-06-23 / MAL-2026-3904
@antv/f6-hammerjs@0.0.2 by openwayne
A javascript library for multi-touch gestures
→ sends to https://github.com/antvis/f6
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: openwayne <openwayne@gmail.com> maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2021-06-01 / MAL-2026-3903
@antv/f6-element@0.0.1 by openwayne
A Graph Visualization Framework in JavaScript
→ sends to https://g6.antv.vision
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2021-06-01 / MAL-2026-3902
@antv/f6-core@0.0.2 by openwayne
A Graph Visualization Framework in JavaScript
→ sends to https://g6.antv.vision
→ 의심 전송지 없음, 원격 실행 형태 없음 — 6 known-vendor host(s), 1 other host(s).
↳ author: https://github.com/orgs/antvis/people maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2022-02-09 / MAL-2026-3901
@antv/f6-alipay@0.0.7 by openwayne
支付宝小程序F6组件
child-process-spawn
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
↳ author: maintainers: lvisei <yunji.me@outlook.com>, iaaron <943720372@qq.com>, jinke.li <jinke.li666@gmail.com>, lzxue <120635640@qq.com>, army8735 <army8735@qq.com>, dengfuping <dengfuping_private@163.com>, afc163 <afc163@gmail.com>, chenluli <chenluuli@gmail.com>, kn9117 <1175863618@qq.com>, bbsqq <1491812683@qq.com>, banxuan <zhuyuxin0627@gmail.com>, yanxiong <ojh496845051@gmail.com>, atool <wzwahl36@qq.com>, alex_zjt <alex_zjt@163.com>, duxinyue023 <duxinyue.dxy@antgroup.com>, wang1212 <mrwang1212@126.com> ↗ registry AUTO-PUBLISHED/ npm / 2021-05-18 / MAL-2026-3997
@antv/g6-wx@0.0.1 by openwayne
微信小程序g6组件
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
AUTO-PUBLISHED/ npm / 2021-05-11 / MAL-2026-3990
@antv/g6-mobile@0.1.2 by openwayne
A Graph Visualization Framework in JavaScript
→ sends to gw.alipayobjects.com · https://gw.alipayobjects.com/mdn/rms_f8c6a0/afts/img/A*I…
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
AUTO-PUBLISHED/ npm / 2021-05-18 / MAL-2026-3983
@antv/g6-alipay@0.0.1 by openwayne
支付宝小程序g6组件
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
AUTO-PUBLISHED/ npm / 2023-01-18 / MAL-2026-3900
@antv/f6@0.0.19 by openwayne
A Mobile Graph Visualization Framework in JavaScript
→ sends to gw.alipayobjects.com · https://gw.alipayobjects.com/mdn/rms_f8c6a0/afts/img/A*I…
base64-decode
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).