// npm package

@antv/gi-sdk

SDK for Graph Insight Application

npmjs.com tarball repo homepage

weekly

104

monthly

509

versions

maintainers

license

ISC

first publish

2022-11-03

publisher

banxuan

tarball

186,175 B

AUTO-PUBLISHED·1 version indexed·latest published 2024-12-05

// publisher campaignby banxuan

5 caught packages from this account

This is not an isolated catch. The same publisher has shipped 4 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @3.0.0· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@3.0.0·2024-12-05·AUTO-PUBLISHED·publisher: banxuan

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-4015public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/gi-sdk",
  "version": "3.0.0",
  "description": "SDK for Graph Insight Application",
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/Graphin.git"
  },
  "license": "ISC",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "lib/index.d.ts",
  "files": [
    "src",
    "es",
    "lib"
  ],
  "dependencies": {
    "@antv/event-emitter": "^0.1.3",
    "@antv/g6": "^5.0.28",
    "@antv/util": "^3.3.10",
    "@tanstack/react-query": "^5.59.20",
    "antd": "^5.21.6",
    "classnames": "^2.5.1",
    "@antv/graphin": "^3.0.4"
  },
  "devDependencies": {
    "less": "^4.2.0",
    "npm-run-all": "^4.1.5",
    "react": "^18.3.1",
    "react-dom": "^18.3.1",
    "rimraf": "^5.0.10"
  },
  "peerDependencies": {
    "less": "^4.2.0",
    "react": ">=16.9.0",
    "react-dom": ">=16.9.0"
  },
  "publishConfig": {
    "access": "public",
    "registry": "https://registry.npmjs.org/"
  },
  "scripts": {
    "build": "run-s clean lib",
    "ci": "run-s type-check lint build",
    "clean": "rimraf lib es",
    "dev": "vite",
    "lib": "run-p lib:*",
    "lib:cjs": "tsc -p tsconfig.build.json --target ES5 --module commonjs --outDir lib",
    "lib:es": "tsc -p tsconfig.build.json --target ES5 --module ESNext --outDir es",
    "lint": "eslint ./src --quiet && prettier ./src --check",
    "type-check": "tsc --noEmit",
    "watch": "pnpm lib:es --w"
  }
}

--- package.json (entry) ---
{
  "name": "@antv/gi-sdk",
  "version": "3.0.0",
  "description": "SDK for Graph Insight Application",
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/Graphin.git"
  },
  "license": "ISC",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "lib/index.d.ts",
  "files": [
    "src",
    "es",
    "lib"
  ],
  "dependencies": {
    "@antv/event-emitter": "^0.1.3",
    "@antv/g6": "^5.0.28",
    "@antv/util": "^3.3.10",
    "@tanstack/react-query": "^5.59.20",
    "antd": "^5.21.6",
    "classnames": "^2.5.1",
    "@antv/graphin": "^3.0.4"
  },
  "devDependencies": {
    "less": "^4.2.0",
    "npm-run-all": "^4.1.5",
    "react": "^18.3.1",
    "react-dom": "^18.3.1",
    "rimraf": "^5.0.10"
  },
  "peerDependencies": {
    "less": "^4.2.0",
    "react": ">=16.9.0",
    "react-dom": ">=16.9.0"
  },
  "publishConfig": {
    "access": "public",
    "registry": "https://registry.npmjs.org/"
  },
  "scripts": {
    "build": "run-s clean lib",
    "ci": "run-s type-check lint build",
    "clean": "rimraf lib es",
    "dev": "vite",
    "lib": "run-p lib:*",
    "lib:cjs": "tsc -p tsconfig.build.json --target ES5 --module commonjs --outDir lib",
    "

--- index.js (entry) ---
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.useWidgetProps = exports.useRegistryManager = exports.useGraphOptions = exports.useGraph = exports.useGlobalModel = exports.useEventSubscribe = exports.useEventPublish = exports.useGIContext = exports.GIRuntimeApp = exports.GISDK = exports.GraphContainer = void 0;
var GraphContainer_1 = require("./components/GraphContainer");
Object.defineProperty(exports, "GraphContainer", { enumerable: true, get: function () { return GraphContainer_1.GraphContainer; } });
var GISDK_1 = require("./GISDK");
Object.defineProperty(exports, "GISDK", { enumerable: true, get: function () { return GISDK_1.GISDK; } });
var runtime_1 = require("./runtime");
Object.defineProperty(exports, "GIRuntimeApp", { enumerable: true, get: function () { return runtime_1.GIRuntimeApp; } });
var context_1 = require("./context");
Object.defineProperty(exports, "useGIContext", { enumerable: true, get: function () { return context_1.useGIContext; } });
var hooks_1 = require("./hooks");
Object.defineProperty(exports, "useEventPublish", { enumerable: true, get: function () { return hooks_1.useEventPublish; } });
Object.defineProperty(exports