// npm package

@antv/g2

the Grammar of Graphics in Javascript

npmjs.com tarball repo homepage

weekly

354,016

monthly

1,257,065

versions

403

maintainers

license

MIT

first publish

2017-10-18

publisher

moayuisuda

tarball

8,829,972 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-01-06

// publisher campaignby moayuisuda

2 caught packages from this account

This is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @5.4.8· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@5.4.8·2026-01-06·AUTO-PUBLISHED·publisher: moayuisuda

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

recent-owner-changepopularity:very-highmature-packageosv-flagged:MAL-2026-3973

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· no static-pattern hits

--- install scripts ---
### prepare
husky install



--- package.json (entry) ---
{
  "name": "@antv/g2",
  "version": "5.4.8",
  "description": "the Grammar of Graphics in Javascript",
  "license": "MIT",
  "main": "lib/index.js",
  "module": "esm/index.js",
  "types": "lib/index.d.ts",
  "unpkg": "dist/g2.min.js",
  "exports": {
    ".": {
      "types": "./lib/index.d.ts",
      "import": "./esm/index.js",
      "require": "./lib/index.js"
    },
    "./lib/*": {
      "types": "./lib/*.d.ts",
      "require": "./lib/*.js"
    },
    "./esm/*": {
      "types": "./lib/*.d.ts",
      "import": "./esm/*.js"
    },
    "./package.json": "./package.json"
  },
  "sideEffects": [
    "./esm/exports.js"
  ],
  "files": [
    "src",
    "lib",
    "esm",
    "dist"
  ],
  "scripts": {
    "start": "cd site && npm run start",
    "dev": "cross-env TZ=Asia/Shanghai vite",
    "dev:link": "cross-env LINK=1 vite",
    "clean": "rimraf lib esm dist",
    "lint-staged": "lint-staged",
    "size": "limit-size",
    "lint": "eslint ./src ./__tests__ && prettier ./src ./__tests__ --check ",
    "fix": "eslint ./src ./__tests__ --fix && prettier ./src ./__tests__ --write ",
    "test": "cross-env TZ=Asia/Shanghai vitest --coverage",
    "test:unit": "cross-env TZ=Asia/Shanghai