// npm package

@antv/async-hook

the control flow for l7

npmjs.com tarball homepage

weekly

49,301

monthly

180,117

versions

maintainers

license

ISC

first publish

2020-02-23

publisher

yiqianyao

tarball

291,923 B

AUTO-PUBLISHED·1 version indexed·latest published 2022-10-24

// publisher campaignby yiqianyao

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @2.2.9· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@2.2.9·2022-10-24·AUTO-PUBLISHED·publisher: yiqianyao

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

popularity:very-highmature-packageosv-flagged:MAL-2026-3851

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· no static-pattern hits

--- package.json (entry) ---
{
  "name": "@antv/async-hook",
  "version": "2.2.9",
  "description": "the control flow for l7",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "types/src/index.d.ts",
  "sideEffects": true,
  "files": [
    "lib",
    "es",
    "types",
    "README.md"
  ],
  "scripts": {
    "tsc": "tsc -p ./tsconfig.type.json",
    "clean": "rimraf dist; rimraf es; rimraf lib;",
    "build": "rollup -c",
    "watch": "rollup -c --watch",
    "lint:ts": "run-p -c lint:ts-*",
    "test": "jest",
    "prepublish": "npm run clean && npm run build && npm run tsc"
  },
  "author": "lzxue",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/antvis/L7/issues"
  },
  "homepage": "https://github.com/antvis/L7#readme",
  "dependencies": {
    "async": "^3.1.1"
  },
  "devDependencies": {
    "@rollup/plugin-buble": "^0.21.3",
    "@rollup/plugin-commonjs": "^19.0.0",
    "@rollup/plugin-node-resolve": "^13.0.0",
    "@rollup/plugin-typescript": "^8.2.1",
    "@types/async": "^3.0.8",
    "rimraf": "^3.0.2",
    "rollup": "^2.52.6",
    "tslib": "^2.3.0",
    "typescript": "^4.0.0"
  },
  "gitHead": "a5d354b66873f700730248d015c5e539c54b34b7",
  "publishConfig": {
    "access": 

--- index.js (entry) ---
'use strict';

Object.defineProperty(exports, '__esModule', { value: true });

/******************************************************************************
Copyright (c) Microsoft Corporation.

Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.
***************************************************************************** */

function __awaiter(thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(