// npm package

@antv/g6-element

A Graph Visualization Framework in JavaScript

npmjs.com tarball repo homepage

weekly

70,290

monthly

258,619

versions

120

maintainers

license

MIT

first publish

2020-12-30

publisher

banxuan

tarball

270,262 B

AUTO-PUBLISHED·1 version indexed·latest published 2025-04-11

// publisher campaignby banxuan

5 caught packages from this account

This is not an isolated catch. The same publisher has shipped 4 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.8.25· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s), 1 other host(s).

@0.8.25·2025-04-11·AUTO-PUBLISHED·publisher: banxuan

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

recent-owner-changepopularity:very-highmature-packagedormant-takeover:prev=iaaron@0.8.24osv-flagged:MAL-2026-3987

→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s), 1 other host(s).

// offending code· no static-pattern hits

--- package.json (entry) ---
{
  "name": "@antv/g6-element",
  "version": "0.8.25",
  "description": "A Graph Visualization Framework in JavaScript",
  "keywords": [
    "antv",
    "g6",
    "graph",
    "graph analysis",
    "graph editor",
    "graph visualization",
    "relational data"
  ],
  "homepage": "https://g6-v4.antv.vision",
  "bugs": {
    "url": "https://github.com/antvis/g6/issues"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/g6"
  },
  "license": "MIT",
  "author": "https://github.com/orgs/antvis/people",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "lib/index.d.ts",
  "files": [
    "package.json",
    "es",
    "lib",
    "dist",
    "LICENSE",
    "README.md"
  ],
  "husky": {
    "hooks": {
      "pre-commit": "lint-staged"
    }
  },
  "lint-staged": {
    "**/*.{js,jsx,ts,tsx}": [
      "npm run lint-staged:js",
      "prettier --write"
    ],
    "**/*.{less,md,json}": [
      "prettier --write"
    ]
  },
  "dependencies": {
    "@antv/g-base": "^0.5.1",
    "@antv/util": "~2.0.5",
    "tslib": "^2.6.2",
    "@antv/g6-core": "0.8.24"
  },
  "devDependencies": {
    "@babel/core": "^7.7.7",
    "@turf/turf": "^5.1.6",
    "@types/jes

--- index.js (entry) ---
"use strict";

require("./nodes");
require("./edges");