Static pattern: clipboard-access

pipeline-check@1.1.0

CI/CD Security Posture Scanner — scores AWS, Terraform, CloudFormation, GitHub Actions, GitLab CI, Azure DevOps, Bitbucket Pipelines, Jenkins, CircleCI, Google Cloud Build, Buildkite, Drone CI, Tekton, Argo Workflows, Dockerfile, Kubernetes manifests, Helm charts, OCI image manifests, SCM repo posture (GitHub / GitLab / Bitbucket), npm and pypi dependency files against OWASP Top 10 CI/CD Risks and 14 other compliance frameworks

→ Worm self-propagation: package reads .npmrc _authToken AND invokes npm publish in install-path code. Shai-Hulud-class shape — no legitimate package re-publishes OTHER packages from the user's machine.

@antv/xflow@2.2.4

[English (US)](README.md) | 简体中文

→ 의심 전송지 없음, 원격 실행 형태 없음 — 15 known-vendor host(s).

@antv/xflow-core@1.0.55

## Getting Started

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/x6@3.1.7

JavaScript diagramming library that uses SVG and HTML for rendering

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/x6-plugin-clipboard@2.1.6

clipboard plugin for X6

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

@antv/t8@0.3.0

T8 is a text visualization solution for unstructured data within the AntV technology stack, and it is a declarative T8 markdown syntax that can be used to describe the content of data interpretation reports.

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/s2@2.7.1

effective spreadsheet render core lib

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

@antv/narrative-text-vis@0.3.16

React component of interactive narrative text

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/l7-editor@1.1.13

Geographic data editing tool based on L7

@antv/gi-assets-xlab@0.1.30

A G6VP asset for X-lab.

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).

@antv/gi-assets-advance@2.5.22

G6VP 高级资产包

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/g2-brush@0.0.2

Select a one-, two-dimensional or irregular region using the mouse.

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@antv/ava-react@3.3.2

React components of AVA.

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).