// npm package

@antv/graphin-graphscope

An Example for GraphScope

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2021-01-20

publisher

iaaron

tarball

115,741 B

AUTO-PUBLISHED·1 version indexed·latest published 2023-06-25

// publisher campaignby iaaron

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.0.5· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.0.5·2023-06-25·AUTO-PUBLISHED·publisher: iaaron

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

recent-owner-changemature-packagedormant-takeover:prev=baizn@1.0.4osv-flagged:MAL-2026-4024public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/graphin-graphscope",
  "version": "1.0.5",
  "description": "An Example for GraphScope",
  "main": "lib/index.js",
  "module": "es/index.js",
  "types": "lib/index.d.ts",
  "scripts": {
    "start": "father build --watch",
    "build": "npm run clean && father build",
    "build:umd": "rimraf dist && node --max_old_space_size=8192 ./node_modules/webpack/bin/webpack.js  --env.NODE_ENV=production  -c ./webpack.config.js ",
    "clean": "rimraf es esm lib dist"
  },
  "dependencies": {
    "@ant-design/icons": "^4.4.0",
    "@antv/graphin": "^2.7.18",
    "@antv/graphin-components": "^2.4.1",
    "@antv/graphin-icons": "^1.0.0",
    "antd": "^4.10.3",
    "classnames": "^2.2.6",
    "re-resizable": "^6.9.0",
    "react": "^17.0.1",
    "react-color": "^2.17.3",
    "react-dom": "^17.0.1",
    "react-draggable": "^4.4.3"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/Graphin.git",
    "directory": "packages/graphin-graphscope"
  },
  "devDependencies": {
    "@ant-design/icons": "^4.3.0",
    "@babel/cli": "^7.6.2",
    "@babel/core": "^7.6.2",
    "@babel/plugin-proposal-class-properties": "^7.5.5",
    "@babel/preset-env": "^7.6.2",
    "@babel/preset-react": "^7.0.0",
    "@types/react-router-dom": "^5.1.0",
    "antd": "^4.10.3",
    "babel-loader": "^8.0.6",
    "babel-plugin-import": "^1.13.0",
    "css-loader": "^3.2.0",
    "father": "^2.23.1",
    "file-loader": "^4.2.0",
    "gh-pages": "^2.1.1",
    "less": "^3.10.3",