// npm 패키지
@antv/gi-assets-tugraph-analytics
Tugraph Analytics Assets
버전
17
메인테이너
51
최초 publish
2023-06-12
publisher
iaaron
tarball
218,074 B
AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2024-08-06
// publisher 캠페인by iaaron
이 계정에서 catch된 패키지 9건고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.
// offending code· @0.2.15· no static-pattern hits
llm: benign · 0.85→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
- @0.2.15··AUTO-PUBLISHED·publisher: iaaronheuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4009
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/gi-assets-tugraph-analytics", "version": "0.2.15", "description": "Tugraph Analytics Assets", "main": "lib/index.js", "module": "es/index.js", "types": "lib/index.d.ts", "sideEffects": [ "*.css", "*.less" ], "files": [ "es", "lib", "dist" ], "dependencies": { "@aligov/global-locale": "^1.0.5", "@aligov/global-string-format": "^1.0.7", "ahooks": "^3.7.7", "@antv/gi-sdk": "2.4.23", "@antv/gi-common-components": "1.3.16" }, "peerDependencies": { "@antv/graphin": "^2.7.27", "antd": "4.x", "react": "17.x", "react-dom": "17.x" }, "publishConfig": { "access": "public" }, "repository": "git@github.com:antvis/G6VP.git", "scripts": { "build": "npm run clean && npm run build:es & npm run build:umd", "build:es": "father build", "build:umd": "webpack --mode production -c ../../webpack.config.js --env path=/packages/gi-assets-tugraph-analytics", "build:umd:analytics": "webpack --mode production -c ../../webpack.config.js --env path=/packages/gi-assets-tugraph-analytics analytics=true", "clean": "rimraf es esm lib dist", "prettier": "prettier --write ./src/** --- index.js (entry) --- "use strict"; function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); } Object.defineProperty(exports, "__esModule", { value: true }); exports.components = void 0; var components = _interopRequireWildcard(require("./components")); exports.components = components; function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function _getRequireWildcardCache(e) { return e ? t : r; })(e); } function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != _typeof(e) && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDes --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.min.js (bundled) --- /*! For license information please see index.min.js.LICENSE.txt */ !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("GISDK"),require("React"),require("antd")):"function"==typeof define&&define.amd?define(["GISDK","React","antd"],t):"object"==typeof exports?exports.GI_ASSETS_TUGRAPH_ANALYTICS=t(require("GISDK"),require("React"),require("antd")):e.GI_ASSETS_TUGRAPH_ANALYTICS=t(e.GISDK,e.React,e.antd)}(self,((e,t,n)=>(()=>{var o={722:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.get=i,t.set=a,t.getJSON=l,t.remove=c,t.default=void 0;var o,r=function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var o=Object.defineProperty&&Object.getOwnPropertyDescriptor?Object.getOwnPropertyDescriptor(e,n):{};o.get||o.set?Object.defineProperty(t,n,o):t[n]=e[n]}return t.default=e,t}(n(836));function a(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},o=n.path,r=void 0===o?"/":o,a=n.domain,i=n.expires,c=n.maxAge,l=void 0===c?1512e3:c,s=n.secure,u=n.sameSite;if(e){t=encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),e=(e=(e=encodeURIComponent(String(e))).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent)).replace(/[()]/g,escape);var f=[];r&&f.push("path=".concat(r)),a&&f.push("domain=".concat(a)),i&&f.push("expires=".concat(i)),l&&f.push("max-age=".concat(l)),s&&f.push("secure"),u&&f.push("samesite=".concat(u)),document.cookie="".concat(e,"=").concat(t,";").concat(f.join(";"))}}function i(e){for(var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=e?void 0:{},o=document.cookie?document.cookie.split("; "):[],r=/(%[0-9A-Z]{2})+/g,a=0;a<o.length;a++){var i=o[a].split("="),c=i.slice(1).join("=");t.json||'"'!==c.charAt(0)||(c=c.slice(1,-1));try{var l=i[0].replace(r,decodeURIComponent);if(c=c.replace(r,decodeURIComponent),t.json)try{c=JSON.parse(c)}catch(e){}if
