// npm 패키지
arnext
버전
6
메인테이너
1
최초 publish
2024-10-24
publisher
asteroiddao
tarball
1,021,100 B
AUTO-PUBLISHED·2개 버전 인덱싱됨·최근 publish: 2026-05-26
// publisher 캠페인by asteroiddao
이 계정에서 catch된 패키지 9건고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.
// offending code· @0.1.5· no static-pattern hits
llm: benign · 0.85→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
- @0.1.5··AUTO-PUBLISHED·publisher: asteroiddaoheuristic 100/100static flags 0llm benign (0.85) via ollamainstall-scripts:preinstallnew-publisher:1dtypo-match:next:d2publisher-multi-name-burst:16publisher-version-pump:17osv-flagged:MAL-2026-4482
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- install scripts --- ### preinstall ./vendor/setup --- package.json (entry) --- { "name": "arnext", "version": "0.1.5", "main": "dist/esm/index.js", "scripts": { "build": "rimraf component-library && node ./esbuild.js", "preinstall": "./vendor/setup" }, "files": [ "dist/*", "dist/**/*" ,"vendor"], "dependencies": { "react-router-dom": "^6.27.0" }, "devDependencies": { "@babel/cli": "^7.25.9", "@babel/core": "^7.26.0", "@babel/preset-env": "^7.26.0", "esbuild": "0.16.17", "esbuild-node-externals": "1.13.0", "esbuild-plugin-glob": "2.2.3", "esbuild-sass-plugin": "2.4.5", "rimraf": "^5.0.5" }, "peerDependencies": { "next": "^15.0.1", "react": "^18.3.1", "react-dom": "^18.3.1" }, "exports": { ".": { "require": "./dist/cjs/index.js", "import": "./dist/esm/index.js" }, "./config": { "require": "./dist/cjs/config.js", "import": "./dist/esm/config.mjs" }, "./package.json": "./package.json" } } --- index.js (entry) --- var __defProp = Object.defineProperty; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __esm = (fn, res) => function __init() { return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res; }; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; // src/ArweaveRoutes.js var ArweaveRoutes_exports = {}; __export(ArweaveRoutes_exports, { default: () => ArweaveRoutes_default }); import { Routes, Route } from "react-router-dom"; import dynamic from "next/dynam --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/esm/config.mjs (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __commonJS = (cb, mod) => function __require() { return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports; }; // src/config.js import { readdirSync } from "fs"; import { resolve, extname } from "path"; var require_config = __commonJS({ "src/config.js"(exports, module) { var arnext = (config) => { const isArweave = process.env.NEXT_PUBLIC_DEPLOY_TARGET === "arweave"; if (isArweave) { const pages = resolve(process.env.PWD, "pages"); const dirs = readdirSync(pages, { withFileTypes: true, recursive: true }); let routes = []; let not_found = null; for (let v of dirs) { const ext = extname(v.name); const p = v.path.replace(pages, ""); const n = v.name.replace(ext, ""); if (v.isFile() && [".js", ".ts", ".jsx", ".tsx"].includes(ext) && !(!p && ["_app", "_document"].includes(n))) { if (!p && v.name === "404.js") { not_found = { page: "404", path: "*" }; } else { let _p = (p === "" ? "/" : p + "/") + n; let __p = []; let sp = _p.split("/"); let i = 0; for (const v2 of sp) { if (v2 !== " --- dist/esm/index.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __esm = (fn, res) => function __init() { return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res; }; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; // src/ArweaveRoutes.js var ArweaveRoutes_exports = {}; __export(ArweaveRoutes_exports, { default: () => ArweaveRoutes_default }); import { Routes, Route } from "react-router-dom"; import dynamic from "next/dynamic"; import React2, { useState, useEffect } from "react"; var ArweaveRoutes, ArweaveRoutes_default; var init_ArweaveRoutes = __esm({ "src/ArweaveRoutes.js"() { ArweaveRoutes = ({ routes = [] }) => { const [_routes, setRoutes] = useState([]); useEffect(() => { let _routes2 = routes; for (let v of routes) { v.component = dynamic(() => import(`../../../../pages/${v.page}`)); } setRoutes(() => routes); return; }, []); return /* @__PURE__ */ React2.createElement(Routes, null, _routes.map((v) => { const Component = v.component; return /* @__PURE__ */ React2.createElement(Route, { path: v.path, element: /* @__PURE__ */ React2.createElement(Component, null) }); })); }; ArweaveRoutes_defaul --- dist/cjs/config.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; // src/config.js var import_fs = require("fs"); var import_path = require("path"); var arnext = (config) => { const isArweave = process.env.NEXT_PUBLIC_DEPLOY_TARGET === "arweave"; if (isArweave) { const pages = (0, import_path.resolve)(process.env.PWD, "pages"); const dirs = (0, import_fs.readdirSync)(pages, { withFileTypes: true, recursive: true }); let routes = []; let not_found = null; for (let v of dirs) { const ext = (0, import_path.extname)(v.name); const p = v.path.replace(pages, ""); const n = v.name.replace(ext, ""); if (v.isFile() && [".js", ".ts", ".jsx", ".tsx"].includes(ext) && !(!p && ["_app", "_document"].includes(n))) { if (!p && v.name === "404.js") { not_found = { page: "404", path: "*" }; } else { let _p = (p === "" ? "/" : p + "/") + n; let __p = []; let sp = _p.split("/"); let i = 0; for (const v2 of sp) { if (v2 !== "") { if (v2.match(/^\[.+\]$/)) { __p.push(v2.replace(/\[(.+)\]/, ":$1")); } else if (n !== "index" || i !== sp.length - 1) { __p.push(v2); } } i++; } routes.push({ page: _p.replace(/^\//, ""), --- dist/cjs/index.js (bundled) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __esm = (fn, res) => function __init() { return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res; }; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports
