// npm 패키지
@antv/f6-wx
微信小程序f6组件
버전
7
메인테이너
51
라이선스
MIT
최초 publish
2021-05-30
publisher
openwayne
tarball
2,712,469 B
AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2023-01-18
// exfil path
what is read → where it shipssteals
- ● Apple/CloudKit
sends to
(no destination string extracted — payload may be dynamic / obfuscated)
evidence in excerpt
> !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.F6=e():t.F6=e()}(this,(function(…
> !function(t,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports.f6=n():t.f6=n()}(this,(function(…// publisher 캠페인by openwayne
이 계정에서 catch된 패키지 9건고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.
// offending code· @0.0.7· 3 files flagged
llm: benign · 0.85→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
- @0.0.7··AUTO-PUBLISHED·publisher: openwayneheuristic 75/100static flags 3llm benign (0.85) via ollamaosv-flagged:MAL-2026-3907reads-apple-cloudkitchild-process-spawnfunction-constructor
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
// offending code· 3 files flaggedpatterns: 3
--- package/src/index.js (excerpt) --- !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.F6=e():t.F6=e()}(this,(function(){return function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)||Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=205)}({0:function(t,e,n){"use strict";n.r(e),n.d(e,"contains",(function(){return i})),n.d(e,"includes",(function(){return i})),n.d(e,"difference",(function(){return a})),n.d(e,"find",(function(){return x})),n.d(e,"findIndex",(function(){return S})),n.d(e,"firstValue",(function(){return w})),n.d(e,"flatten",(function(){return O})),n.d(e,"flattenDeep",(function(){return M})),n. --- package/src/extends/layout/dagreLayout.js (excerpt) --- !function(t,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports.f6=n():t.f6=n()}(this,(function(){return function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}return e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)||Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=218)}([,,,,,,,function(t,n,e){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.Base=void 0;var r=function(){function t(){this.nodes=[],this.edges=[],this.combos=[],this.positions=[],this.destroyed=!1,this.onLayoutEnd=function(){}}return t.prototype.layout=function(t){return this.init(t),this.execute(!0)},t.prototype.init=function(t){this.nodes=t.nodes||[],this. --- package/src/container/container.js (excerpt) --- Component({ data: {}, properties: { style: { type: String, value: '', }, width: { type: Number, value: 100, }, height: { type: Number, value: 100, }, onInit: { type: Function, value: () => {}, }, onTouchEvent: { type: Function, value: () => {}, }, onError: { type: Function, value: () => {}, }, pixelRatio: { type: Number, value: 1, }, }, observers: { pixelRatio: function (pixelRatio) { this.setData({ finalPixelRatio: pixelRatio >= 1 ? Math.ceil(pixelRatio) : 1, }); }, }, ready() { const query = wx.createSelectorQuery().in(this); query .select('#g6-canvas') .fields({ node: true, size: true, }) .exec((ret) => { console.log('ret', ret); const { node: canvas } = ret[0]; const finalPixelRatio = this.data.finalPixelRatio; canvas.width = this.data.width * finalPixelRatio; canvas.height = this.data.height * finalPixelRatio; this.rect = { width: this.data.width * finalPixelRatio, height: this.data.height * finalPixelRatio, left: canvas._left, top: canvas._top, }; console.log('rect', this.rect); this.ctx = canvas.getContext('2d'); this.data.onInit(this.ctx, this.rect, canvas, 'mini-native'); }); }, methods: { error(e) { this.
