// npm 패키지
@antv/gi-assets-scene
G6VP 基础模版包
주간
69
월간
337
버전
30
메인테이너
51
최초 publish
2022-11-09
publisher
iaaron
tarball
7,478,594 B
AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2024-08-06
// publisher 캠페인by iaaron
이 계정에서 catch된 패키지 9건고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.
// offending code· @2.2.21· 1 file flagged
llm: benign · 0.85→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
- @2.2.21··AUTO-PUBLISHED·publisher: iaaronheuristic 75/100static flags 1llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4007public-github-push
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
// offending code· 1 file flaggedpatterns: 1
--- package/package.json (excerpt) --- { "name": "@antv/gi-assets-scene", "version": "2.2.21", "description": "G6VP 基础模版包", "main": "lib/index.js", "module": "es/index.js", "types": "lib/index.d.ts", "repository": { "type": "git", "url": "https://github.com/antvis/G6VP.git" }, "sideEffects": [ "*.css", "*.less" ], "files": [ "dist", "lib", "es" ], "dependencies": { "3d-force-graph": "1.70.10", "@aligov/global-locale": "^1.0.5", "@aligov/global-string-format": "^1.0.7", "@ant-design/icons": "^4.7.0", "@antv/g2": "^5.0.11", "@antv/l7-draw": "^2.4.24", "@antv/l7plot": "^0.0.11", "@turf/turf": "^6.5.0", "ahooks": "^3.7.7", "dayjs": "^1.10.5", "graph-timeline": "^1.1.7", "lodash-es": "^4.17.21", "react-spring": "9.6.0", "three": "0.139.2", "@antv/gi-sdk": "2.4.23" }, "devDependencies": { "mini-css-extract-plugin": "^2.7.6", "rimraf": "^3.0.2", "webpack": "^5.88.0", "webpack-cli": "^5.0.0" }, "peerDependencies": { "@antv/graphin": "^2.7.27", "antd": "4.x", "react": "17.x", "react-dom": "17.x" }, "publishConfig": { "access": "public" }, "scripts": { "build": "npm run clean && npm run build:es & npm run build:umd", "build:es": "father build", "build:umd": "webpack --mode production -c ../../webpack.config.js --env path=/packages/gi-assets-scene", "clean": "rimraf es esm lib dist", "docs": "dumi dev", "prettier": "prettier --write ./s --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.min.js (bundled) --- /*! For license information please see index.min.js.LICENSE.txt */ !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e(require("GISDK"),require("React"),require("ReactDOM"),require("antd")):"function"==typeof define&&define.amd?define(["GISDK","React","ReactDOM","antd"],e):"object"==typeof exports?exports.GI_ASSETS_SCENE=e(require("GISDK"),require("React"),require("ReactDOM"),require("antd")):t.GI_ASSETS_SCENE=e(t.GISDK,t.React,t.ReactDOM,t.antd)}(self,((t,e,n,r)=>(()=>{var i={93722:(t,e,n)=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.get=a,e.set=o,e.getJSON=l,e.remove=s,e.default=void 0;var r,i=function(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var n in t)if(Object.prototype.hasOwnProperty.call(t,n)){var r=Object.defineProperty&&Object.getOwnPropertyDescriptor?Object.getOwnPropertyDescriptor(t,n):{};r.get||r.set?Object.defineProperty(e,n,r):e[n]=t[n]}return e.default=t,e}(n(89836));function o(t,e){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=n.path,i=void 0===r?"/":r,o=n.domain,a=n.expires,s=n.maxAge,l=void 0===s?1512e3:s,c=n.secure,u=n.sameSite;if(t){e=encodeURIComponent(String(e)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),t=(t=(t=encodeURIComponent(String(t))).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent)).replace(/[()]/g,escape);var h=[];i&&h.push("path=".concat(i)),o&&h.push("domain=".concat(o)),a&&h.push("expires=".concat(a)),l&&h.push("max-age=".concat(l)),c&&h.push("secure"),u&&h.push("samesite=".concat(u)),document.cookie="".concat(t,"=").concat(e,";").concat(h.join(";"))}}function a(t){for(var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=t?void 0:{},r=document.cookie?document.cookie.split("; "):[],i=/(%[0-9A-Z]{2})+/g,o=0;o<r.length;o++){var a=r[o].split("="),s=a.slice(1).join("=");e.json||'"'!==s.charAt(0)||(s=s.slice(1,-1));try{var l=a[0].replace(i,decodeURIComponent);if(s=s.replace(i,decodeURICompon
