// npm package

@antv/gi-common-components

G6VP 通用UI组件

npmjs.com tarball repo homepage

versions

maintainers

first publish

2022-11-09

publisher

iaaron

tarball

506,309 B

AUTO-PUBLISHED·1 version indexed·latest published 2024-07-31

// publisher campaignby iaaron

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.3.16· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.3.16·2024-07-31·AUTO-PUBLISHED·publisher: iaaron

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-4012public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/gi-common-components",
  "version": "1.3.16",
  "description": "G6VP 通用UI组件",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "lib/index.d.ts",
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/G6VP.git"
  },
  "sideEffects": [
    "*.css",
    "*.less"
  ],
  "files": [
    "lib",
    "es"
  ],
  "dependencies": {
    "@aligov/global-locale": "^1.0.5",
    "@aligov/global-string-format": "^1.0.7",
    "@antv/g2plot": "^2.4.31",
    "@formily/antd": "^2.1.0",
    "@formily/core": "^2.1.0",
    "@formily/json-schema": "^2.2.2",
    "@formily/react": "^2.1.0",
    "@formily/reactive": "^2.2.2",
    "@formily/shared": "^2.2.2",
    "classnames": "^2.2.6",
    "dumi": "^1.1.50",
    "nanoid": "^4.0.0",
    "react-color": "^2.19.3",
    "use-immer": "^0.9.0"
  },
  "devDependencies": {
    "rimraf": "^3.0.2"
  },
  "peerDependencies": {
    "@antv/graphin": "^2.7.27",
    "antd": "4.x",
    "react": "17.x",
    "react-dom": "17.x"
  },
  "publishConfig": {
    "access": "public"
  },
  "scripts": {
    "build": "npm run clean && npm run build:es & npm run build:umd",
    "build:umd": "npm run build:es",
    "build:es": "npm run clean && father build",
    "clean": "rimraf es esm lib dist",
    "docs": "dumi dev",
    "prettier": "prettier --write ./src/**/**/**/*.js",
    "start": "npm run clean && father build --watch",
    "test": "jest",
    "sync": "tnpm sync @antv/gi-common-components"
  }
}