// npm package

@antv/component

Visualization components for AntV, based on G.

npmjs.com tarball repo homepage

versions

193

maintainers

license

MIT

first publish

2018-09-19

publisher

moayuisuda

tarball

3,199,021 B

AUTO-PUBLISHED·1 version indexed·latest published 2025-11-21

// publisher campaignby moayuisuda

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @2.1.11· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s).

@2.1.11·2025-11-21·AUTO-PUBLISHED·publisher: moayuisuda

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-3863child-process-spawn

→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- install scripts ---
### prepare
husky install

### prepublishOnly
npm run ci



--- package/src/util/svg2marker.ts (excerpt) ---
/**
 * from: https://github.com/zqlu/svg2marker
 * translate svg string to G.Marker
 */
import svgPathParser from 'svg-path-parser';

type IPointPair = [number | undefined, number | undefined];

type ISVGPathCmd = {
  code: string;
  command: string;
  relative?: boolean;
  x?: number;
  y?: number;
  x1?: number;
  y1?: number;
  x2?: number;
  y2?: number;
};

/**
 *  Return function to register a Marker Symbol for give SVG Path
 *
 * @param svgPath SVG Path string
 * @param viewBoxWidth SVG view box width, default to 1024
 * @param viewBoxHeight SVG view box height, default to 1024
 */
export function path2marker(
  svgPath: string,
  viewBoxWidth: number = 1024,
  viewBoxHeight: number = 1014
): (x: number, y: number, r: number) => (string | number)[][] {
  return (x: number, y: number, r: number): (string | number)[][] => {
    // @ts-ignore
    const paths: ISVGPathCmd[] = svgPathParser(svgPath);

    return paths.map((path: ISVGPathCmd) => {
      const arr: (string | number)[] = [];
      arr.push(path.relative === true ? path.code.toLowerCase() : path.code.toUpperCase());
      const pairs: IPointPair[] = [
        [path.x1, path.y1],
        [path.x2, path.y2],
        [path.x, path.y],
      ];
      pairs.forEach((pair: IPointPair) => {
        const [px, py] = pair;
        if (px !== undefined) {
          arr.push(path.relative === true ? (px / viewBoxWidth) * 2 * r : x - r + r * 2 * (px / viewBoxWidth));
        }
        if (py !== undefined) {
          arr.