// npm package
@antv/gi-assets-neo4j
Neo4j 资产包
versions
27
maintainers
51
first publish
2022-11-18
publisher
iaaron
tarball
819,372 B
AUTO-PUBLISHED·1 version indexed·latest published 2024-08-06
// publisher campaignby iaaron
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.1.15· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.1.15··AUTO-PUBLISHED·publisher: iaaronheuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4006
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/gi-assets-neo4j", "version": "2.1.15", "description": "Neo4j 资产包", "main": "lib/index.js", "module": "es/index.js", "types": "lib/index.d.ts", "sideEffects": [ "*.css", "*.less" ], "files": [ "dist", "lib", "es" ], "dependencies": { "@aligov/global-locale": "^1.0.5", "@aligov/global-string-format": "^1.0.7", "@ant-design/icons": "^4.7.0", "json2csv": "^5.0.7", "neo4j-driver": "^5.8.0", "umi-request": "^1.4.0", "use-immer": "^0.9.0", "@antv/gi-sdk": "2.4.23" }, "peerDependencies": { "@antv/graphin": "^2.7.27", "antd": "4.x", "react": "17.x" }, "publishConfig": { "access": "public" }, "repository": "git@github.com:antvis/G6VP.git", "scripts": { "build": "npm run clean && npm run build:es & npm run build:umd", "build:es": "father build", "build:umd": "webpack --mode production -c ../../webpack.config.js --env path=/packages/gi-assets-neo4j", "clean": "rimraf es esm lib dist", "demo": "umi dev", "demo:build": "umi build", "docs": "dumi dev", "prettier": "prettier --write ./src/**/**/**/*.js", "remove:antd": "rm -rf ./node_modules --- index.js (entry) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); Object.defineProperty(exports, "services", { enumerable: true, get: function get() { return _services.default; } }); var _services = _interopRequireDefault(require("./services")); function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; } --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.min.js (bundled) --- /*! For license information please see index.min.js.LICENSE.txt */ !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("GISDK"),require("React"),require("antd")):"function"==typeof define&&define.amd?define(["GISDK","React","antd"],t):"object"==typeof exports?exports.GI_ASSETS_NEO4J=t(require("GISDK"),require("React"),require("antd")):e.GI_ASSETS_NEO4J=t(e.GISDK,e.React,e.antd)}(self,((e,t,r)=>(()=>{var n={3722:(e,t,r)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.get=u,t.set=i,t.getJSON=s,t.remove=a,t.default=void 0;var n,o=function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r in e)if(Object.prototype.hasOwnProperty.call(e,r)){var n=Object.defineProperty&&Object.getOwnPropertyDescriptor?Object.getOwnPropertyDescriptor(e,r):{};n.get||n.set?Object.defineProperty(t,r,n):t[r]=e[r]}return t.default=e,t}(r(9836));function i(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},n=r.path,o=void 0===n?"/":n,i=r.domain,u=r.expires,a=r.maxAge,s=void 0===a?1512e3:a,c=r.secure,l=r.sameSite;if(e){t=encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),e=(e=(e=encodeURIComponent(String(e))).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent)).replace(/[()]/g,escape);var f=[];o&&f.push("path=".concat(o)),i&&f.push("domain=".concat(i)),u&&f.push("expires=".concat(u)),s&&f.push("max-age=".concat(s)),c&&f.push("secure"),l&&f.push("samesite=".concat(l)),document.cookie="".concat(e,"=").concat(t,";").concat(f.join(";"))}}function u(e){for(var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},r=e?void 0:{},n=document.cookie?document.cookie.split("; "):[],o=/(%[0-9A-Z]{2})+/g,i=0;i<n.length;i++){var u=n[i].split("="),a=u.slice(1).join("=");t.json||'"'!==a.charAt(0)||(a=a.slice(1,-1));try{var s=u[0].replace(o,decodeURIComponent);if(a=a.replace(o,decodeURIComponent),t.json)try{a=JSON.parse(a)}catch(e){}if(e===s){r=a;break}e||(
