// npm package

@antv/g6-plugin

G6 Plugin

npmjs.com tarball repo homepage

versions

118

maintainers

license

MIT

first publish

2020-12-30

publisher

banxuan

tarball

840,902 B

AUTO-PUBLISHED·1 version indexed·latest published 2025-04-11

// publisher campaignby banxuan

5 caught packages from this account

This is not an isolated catch. The same publisher has shipped 4 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.8.25· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@0.8.25·2025-04-11·AUTO-PUBLISHED·publisher: banxuan

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

recent-owner-changemature-packagedormant-takeover:prev=iaaron@0.8.24osv-flagged:MAL-2026-3992public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/g6-plugin",
  "version": "0.8.25",
  "description": "G6 Plugin",
  "main": "lib/index.js",
  "module": "es/index.js",
  "dependencies": {
    "@antv/dom-util": "^2.0.2",
    "@antv/g-base": "^0.5.1",
    "@antv/g-canvas": "^0.5.2",
    "@antv/g-svg": "^0.5.2",
    "@antv/matrix-util": "^3.1.0-beta.3",
    "@antv/scale": "^0.3.4",
    "@antv/util": "^2.0.9",
    "@antv/path-util": "^2.0.3",
    "insert-css": "^2.0.0",
    "@antv/g6-element": "0.8.25",
    "@antv/g6-core": "0.8.24"
  },
  "sideEffects": false,
  "author": "",
  "license": "MIT",
  "husky": {
    "hooks": {
      "pre-commit": "lint-staged"
    }
  },
  "lint-staged": {
    "**/*.{js,jsx,ts,tsx}": [
      "npm run lint-staged:js",
      "prettier --write"
    ],
    "**/*.{less,md,json}": [
      "prettier --write"
    ]
  },
  "publishConfig": {
    "access": "public"
  },
  "devDependencies": {
    "@types/jest": "^26.0.18",
    "@umijs/fabric": "^2.0.0",
    "event-simulate": "^1.0.1",
    "father": "^2.30.0",
    "jest": "^26.6.3",
    "jquery": "^3.5.1",
    "rimraf": "^3.0.2",
    "ts-jest": "^26.4.4"
  },
  "peerDependencies": {
    "@antv/g6": "4.8.25"
  },
  "repository": "https://github.com/antvis/G6.git",
  "scripts": {
    "build": "npm run clean && father build",
    "ci": "npm run build && npm run coverage",
    "clean": "rimraf es esm lib dist",
    "coverage": "jest --coverage",
    "lint": "eslint --ext .js,.jsx,.ts,.tsx --format=pretty \"./\"",
    "lint:src": "eslint --ext .