// npm package

@antv/color-schema

JSON Schema for Color Palette

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2021-07-14

publisher

neoddish

tarball

165,567 B

AUTO-PUBLISHED·1 version indexed·latest published 2021-11-16

// publisher campaignby neoddish

7 caught packages from this account

This is not an isolated catch. The same publisher has shipped 6 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.2.3· 3 files flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

@0.2.3·2021-11-16·AUTO-PUBLISHED·publisher: neoddish

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

osv-flagged:MAL-2026-3861public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

// offending code· 3 files flaggedpatterns: 1

--- install scripts ---
### prepare
husky install

### prepublishOnly
npm run ci



--- package/package.json (excerpt) ---
{
  "name": "@antv/color-schema",
  "version": "0.2.3",
  "description": "JSON Schema for Color Palette",
  "main": "lib/src/index.js",
  "types": "lib/src/index.d.ts",
  "unpkg": "dist/index.min.js",
  "module": "esm/src/index.js",
  "files": [
    "src",
    "esm",
    "lib",
    "build"
  ],
  "scripts": {
    "clean": "rimraf lib esm dist",
    "lint-staged": "lint-staged",
    "size": "limit-size",
    "format": "prettier --write \"src/**/*.ts\" \"__tests__/**/*.ts\" \"demo/**/*.{ts,tsx}\"",
    "format-check": " prettier ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --check",
    "lint": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} && npm run format-check",
    "fix": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --fix && npm run format",
    "test": "jest",
    "build:umd": "rimraf ./dist && rollup -c && npm run size",
    "build:cjs": "rimraf ./lib && tsc --module commonjs --outDir lib",
    "build:esm": "rimraf ./esm && tsc --module ESNext --outDir esm",
    "build": "run-p build:*",
    "schema": "mkdir -p build && ts-json-schema-generator -f tsconfig.json -p src/index.ts -t ColorSchema --no-type-check --no-ref-encode > build/color-schema.json",
    "ci": "run-s lint test build schema",
    "prepublishOnly": "npm run ci",
    "prepare": "husky install",
    "setup:demo": "cd demo && npm install --package-lock=false",
    "start:demo": "npm run setup:demo && cd demo && npm start",
    "deploy:site": "cd demo && npm run depl

--- package/lib/package.json (excerpt) ---
{
    "name": "@antv/color-schema",
    "version": "0.2.3",
    "description": "JSON Schema for Color Palette",
    "main": "lib/src/index.js",
    "types": "lib/src/index.d.ts",
    "unpkg": "dist/index.min.js",
    "module": "esm/src/index.js",
    "files": [
        "src",
        "esm",
        "lib",
        "build"
    ],
    "scripts": {
        "clean": "rimraf lib esm dist",
        "lint-staged": "lint-staged",
        "size": "limit-size",
        "format": "prettier --write \"src/**/*.ts\" \"__tests__/**/*.ts\" \"demo/**/*.{ts,tsx}\"",
        "format-check": " prettier ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --check",
        "lint": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} && npm run format-check",
        "fix": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --fix && npm run format",
        "test": "jest",
        "build:umd": "rimraf ./dist && rollup -c && npm run size",
        "build:cjs": "rimraf ./lib && tsc --module commonjs --outDir lib",
        "build:esm": "rimraf ./esm && tsc --module ESNext --outDir esm",
        "build": "run-p build:*",
        "schema": "mkdir -p build && ts-json-schema-generator -f tsconfig.json -p src/index.ts -t ColorSchema --no-type-check --no-ref-encode > build/color-schema.json",
        "ci": "run-s lint test build schema",
        "prepublishOnly": "npm run ci",
        "prepare": "husky install",
        "setup:demo": "cd demo && npm install --package-lock=false",
   

--- package/esm/package.json (excerpt) ---
{
    "name": "@antv/color-schema",
    "version": "0.2.3",
    "description": "JSON Schema for Color Palette",
    "main": "lib/src/index.js",
    "types": "lib/src/index.d.ts",
    "unpkg": "dist/index.min.js",
    "module": "esm/src/index.js",
    "files": [
        "src",
        "esm",
        "lib",
        "build"
    ],
    "scripts": {
        "clean": "rimraf lib esm dist",
        "lint-staged": "lint-staged",
        "size": "limit-size",
        "format": "prettier --write \"src/**/*.ts\" \"__tests__/**/*.ts\" \"demo/**/*.{ts,tsx}\"",
        "format-check": " prettier ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --check",
        "lint": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} && npm run format-check",
        "fix": "eslint ./src/**/*.ts ./__tests__/**/*.ts ./demo/**/*.{ts,tsx} --fix && npm run format",
        "test": "jest",
        "build:umd": "rimraf ./dist && rollup -c && npm run size",
        "build:cjs": "rimraf ./lib && tsc --module commonjs --outDir lib",
        "build:esm": "rimraf ./esm && tsc --module ESNext --outDir esm",
        "build": "run-p build:*",
        "schema": "mkdir -p build && ts-json-schema-generator -f tsconfig.json -p src/index.ts -t ColorSchema --no-type-check --no-ref-encode > build/color-schema.json",
        "ci": "run-s lint test build schema",
        "prepublishOnly": "npm run ci",
        "prepare": "husky install",
        "setup:demo": "cd demo && npm install --package-lock=false",