// npm 패키지
@antv/l7-editor
Geographic data editing tool based on L7
주간
76
월간
252
버전
26
메인테이너
51
라이선스
MIT
최초 publish
2023-08-14
publisher
yanxiong
tarball
1,096,272 B
AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2024-03-29
// exfil path
what is read → where it shipssteals
- ○ clipboard
sends to
(no destination string extracted — payload may be dynamic / obfuscated)
→ view full payload// publisher 캠페인by yanxiong
이 계정에서 catch된 패키지 6건고립된 catch가 아닙니다. 동일 publisher가 5개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.
// offending code· @1.1.13· 3 files flagged
- @1.1.13··AUTO-PUBLISHED·publisher: yanxiongheuristic 75/100static flags 4llm skippedmature-packageosv-flagged:MAL-2026-4039install-path-npm-publishclipboard-accesseval-dynamicfunction-constructor
// offending code· 3 files flaggedpatterns: 4
--- install scripts --- ### prepare dumi setup --- package/package.json (excerpt) --- { "name": "@antv/l7-editor", "version": "1.1.13", "description": "Geographic data editing tool based on L7", "files": [ "lib", "es" ], "main": "lib/index.js", "module": "es/index.js", "types": "es/index.d.ts", "license": "MIT", "scripts": { "start": "dumi dev", "build": "father build", "i18n:collect": "kiwi --extract src", "lint": "run-p lint:*", "lint:ts": "eslint src --ext .ts,.tsx --ignore-pattern 'src/**/demos/'", "lint-fix": "eslint src --fix --ext .ts,.tsx --format=pretty", "prettier": "prettier --write 'src/**.{tsx,ts,md,json}'", "clean": "rimraf es lib dist umd", "format": "prettier --cache --write .", "prepare": "dumi setup", "ci": "run-s lint doctor build", "setup": "dumi setup", "doctor": "father doctor", "docs:build": "dumi build", "docs:build-analyze": "ANALYZE=1 dumi build", "docs:deploy": "gh-pages -d docs-dist", "deploy": "npm run docs:build && npm run docs:deploy", "release": "npm run build && npm publish" }, "dependencies": { "@ant-design/icons": "^4.8.0", "@antv/l7-draw": "^3.0.21", "@antv/larkmap": "^1.4.4", "@antv/sam": "^0.1.0", "@emotion/css": "^11.11.2", "@mapbox/togeojson": "^0.16.0", "@turf/turf": "^6.5.0", "ahooks": "^3.7.0", "classnames": "^2.3.2", "clipboard": "^2.0.11", "color": "^4.2.3", "dayjs": "^1.11.7", "gcoord": "^1.0.5", "i18next": "^23.4.6", "i18next-browser-languagedetector": --- package/lib/components/map-control-group/l7-option-control/index.js (excerpt) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports" for node compatibility. isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod )); var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/components/map-control-group/l7-option-control/index.tsx var l7_option_control_exports = {}; __export(l7_optio --- package/lib/components/layer-contextmenu-popup/code-block.js (excerpt) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports" for node compatibility. isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod )); var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/components/layer-contextmenu-popup/code-block.tsx var code_block_exports = {}; __export(code_block_exports, { --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- lib/utils/file-to-source.js (bundled) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports" for node compatibility. isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod )); var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/utils/file-to-source.ts var file_to_source_exports = {}; __export(file_to_source_exports, { csv2json: () => csv2json, parserExcelFileToSource: () => parserExcelFileToSource, parserExcelToSource: () => parserExcelToSource, parserGeoJson: () => parserGeoJson, parserJsonToGeoJson: () => parserJsonToGeoJson, parserTextFileToSource: () => parserTextFileToSource, readFileAsArrayBuffer: () => readFileAsArrayBuffer, readFileAsText: () => readFileAsText }); module.exports = __toCommonJS(file_to_source_exports); var import_togeojson = __toESM(require("@mapbox/togeojson")); var import_lodash_es = r --- lib/hooks/use-draw-helper.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/hooks/use-draw-helper.ts var use_draw_helper_exports = {}; __export(use_draw_helper_exports, { useDrawHelper: () => useDrawHelper }); module.exports = __toCommonJS(use_draw_helper_exports); var import_react_i18next = require("react-i18next"); function useDrawHelper() { const { t } = (0, import_react_i18next.useTranslation)(); return { draw: `${t("map_contorl_group.draw.draw")}`, drawFinish: `${t("map_contorl_group.draw.drawFinish")}`, drawContinue: `${t("map_contorl_group.draw.drawContinue")}`, pointHover: `${t("map_contorl_group.draw.pontHover")}`, lineHover: `${t("map_contorl_group.draw.lineHover")}`, polygonHover: `${t("map_contorl_group.draw.lineHover")}`, midPointHover: `${t(`map_contorl_group.draw.midPointHover`)}` }; } // Annotate the CommonJS export names for ESM import in node: 0 && (module.exports = { useDrawHelper }); --- lib/hooks/use-filter-features.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/hooks/use-filter-features.ts var use_filter_features_exports = {}; __export(use_filter_features_exports, { filterFeatureAtom: () => filterFeatureAtom, isEmptyFilter: () => isEmptyFilter, useFilterFeatures: () => useFilterFeatures }); module.exports = __toCommonJS(use_filter_features_exports); var import_lodash_es = require("lodash-es"); var import_react = require("react"); var import_recoil = require("recoil"); var import_recoil2 = require("../recoil"); function isEmptyFilter(filter) { const { operator, value, type, field } = filter; return (0, import_lodash_es.isUndefined)(operator) || (0, import_lodash_es.isUndefined)(value) || (0, import_lodash_es.isUndefined)(type) || (0, import_lodash_es.isUndefined)(field) || value === "" || Number.isNaN(value) || value === null; } function numberFilter(filter, properties) { const newField = properties[filter.field]; switch (filter.operator) { case "<": return newField < filter.value; case "<=": return newField <= filter.value; case "=": return newField === filter.value; case ">": return newField > filter.value; case ">=": return newField >= filter.value; default: if (Array.is --- lib/components/map-control-group/location-search-control/location-search.js (bundled) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports" for node compatibility. isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod )); var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/components/map-control-group/location-search-control/location-search.tsx var location_search_exports = {}; __export(location_search_exports, { LocationSearch: () => LocationSearch }); module.exports = __toCommonJS(location_search_exports); var import_ahooks = require("ahooks"); var import_antd = require("antd"); var import_react = __toESM(require("react")); var import_react_i18next = require("react-i18next"); var import_styles = __toESM(require("./styles")); var import_utils = require("./utils"); var { Option } = import_antd.Select; var LocationSearch = ({ searchParams, showDistrict, showAddress --- lib/components/app-header/btn/import-btn/file-upload.js (bundled) --- var __create = O
