// npm package

@antv/g-shader-components

Shader components based on glslify

npmjs.com tarball repo homepage

versions

129

maintainers

license

MIT

first publish

2021-12-14

publisher

alex_zjt

tarball

4,970 B

AUTO-PUBLISHED·1 version indexed·latest published 2025-12-15

// publisher campaignby alex_zjt

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @2.0.1-beta.0· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s).

@2.0.1-beta.0·2025-12-15·AUTO-PUBLISHED·publisher: alex_zjt

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

recent-owner-changemature-packagedormant-takeover:prev=panyuqi@1.8.7osv-flagged:MAL-2026-3961public-github-push

→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/g-shader-components",
  "version": "2.0.1-beta.0",
  "description": "Shader components based on glslify",
  "keywords": [
    "antv",
    "g"
  ],
  "homepage": "https://github.com/antvis/g#readme",
  "bugs": {
    "url": "https://github.com/antvis/g/issues"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/antvis/g.git"
  },
  "license": "MIT",
  "author": "https://github.com/orgs/antvis/people",
  "main": "scene.both.glsl",
  "files": [
    "package.json",
    "dist",
    "LICENSE",
    "README.md"
  ],
  "devDependencies": {
    "glslify": "^7.1.1"
  },
  "publishConfig": {
    "access": "public"
  },
  "dependencies": {
    "@babel/runtime": "^7.25.6"
  },
  "scripts": {
    "sync": "tnpm sync"
  }
}

--- package.json (entry) ---
{
  "name": "@antv/g-shader-components",
  "version": "2.0.1-beta.0",
  "description": "Shader components based on glslify",
  "keywords": [
    "antv",
    "g"
  ],
  "homepage": "https://github.com/antvis/g#readme",
  "bugs": {
    "url": "https://github.com/antvis/g/issues"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/antvis/g.git"
  },
  "license": "MIT",
  "author": "https://github.com/orgs/antvis/people",
  "main": "scene.both.glsl",
  "files": [
    "package.json",
    "dist",
    "LICENSE",
    "README.md"
  ],
  "devDependencies": {
    "glslify": "^7.1.1"
  },
  "publishConfig": {
    "access": "public"
  },
  "dependencies": {
    "@babel/runtime": "^7.25.6"
  },
  "scripts": {
    "sync": "tnpm sync"
  }
}