// npm package

@antv/gi-mock-data

G6VP MOCK DATA

npmjs.com tarball repo homepage

weekly

monthly

115

versions

maintainers

license

ISC

first publish

2023-01-17

publisher

pomelo-nwu

tarball

289,309 B

AUTO-PUBLISHED·1 version indexed·latest published 2023-03-11

// publisher campaignby pomelo-nwu

3 caught packages from this account

This is not an isolated catch. The same publisher has shipped 2 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.0.5· 2 files flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.0.5·2023-03-11·AUTO-PUBLISHED·publisher: pomelo-nwu

heuristic 75/100

static flags 2

llm benign (0.85) via ollama

osv-flagged:MAL-2026-4013public-github-pusharchive-then-upload

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 2 files flaggedpatterns: 2

--- package/package.json (excerpt) ---
{
  "name": "@antv/gi-mock-data",
  "version": "1.0.5",
  "description": "G6VP MOCK DATA",
  "main": "index.js",
  "files": [
    "cdn"
  ],
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "publishConfig": {
    "access": "public"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/G6VP.git"
  },
  "author": "",
  "license": "ISC"
}


--- package/cdn/security-network.json (excerpt) ---
{
  "nodes": [
    {
      "id": "pink_botnet",
      "nodeType": "botnet",
      "nodeTypeKeyFromProperties": "dataType",
      "data": {
        "id": "pink_botnet",
        "dataType": "botnet",
        "legendType": "僵尸网络家族",
        "first_seen": "2020-06-06",
        "last_seen": "2021-07-18"
      }
    },
    {
      "id": "CVE-2019-2528",
      "nodeType": "cve",
      "nodeTypeKeyFromProperties": "dataType",
      "data": {
        "id": "CVE-2019-2528",
        "dataType": "cve",
        "legendType": "漏洞事件"
      }
    },
    {
      "id": "CVE-2021-5191",
      "nodeType": "cve",
      "nodeTypeKeyFromProperties": "dataType",
      "data": {
        "id": "CVE-2021-5191",
        "dataType": "cve",
        "legendType": "漏洞事件"
      }
    },
    {
      "id": "dc09ee2ff472a54051ed99ba760604c6",
      "nodeType": "file",
      "nodeTypeKeyFromProperties": "dataType",
      "data": {
        "id": "dc09ee2ff472a54051ed99ba760604c6",
        "name": "busybox",
        "dataType": "file",
        "legendType": "单文件",
        "md5": "dc09ee2ff472a54051ed99ba760604c6"
      }
    },
    {
      "id": "42cea58ac6bd53546977a199dfae338b",
      "nodeType": "file",
      "nodeTypeKeyFromProperties": "dataType",
      "data": {
        "id": "42cea58ac6bd53546977a199dfae338b",
        "name": "busybox",
        "dataType": "file",
        "legendType": "单文件",
        "md5": "42cea58ac6bd53546977a199dfae338b"
      }
    },
    {
      "id": "62d9e1385c974b239ecea83e584869bc