// npm package
@antv/l7
A Large-scale WebGL-powered Geospatial Data Visualization
versions
637
maintainers
51
license
MIT
first publish
2018-11-20
publisher
lzxue
tarball
1,610,359 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-11
// publisher campaignby lzxue
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.25.10· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.25.10··AUTO-PUBLISHED·publisher: lzxueheuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4033
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/l7", "version": "2.25.10", "description": "A Large-scale WebGL-powered Geospatial Data Visualization", "repository": "git@github.com:antvis/L7.git", "license": "MIT", "author": "https://github.com/orgs/antvis/people", "sideEffects": true, "main": "lib/index.js", "unpkg": "dist/l7.js", "module": "es/index.js", "types": "es/index.d.ts", "files": [ "dist", "lib", "es", "!dist/report.html" ], "dependencies": { "@babel/runtime": "^7.7.7", "@antv/l7-component": "2.25.10", "@antv/l7-core": "2.25.10", "@antv/l7-layers": "2.25.10", "@antv/l7-maps": "2.25.10", "@antv/l7-source": "2.25.10", "@antv/l7-scene": "2.25.10", "@antv/l7-utils": "2.25.10" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "scripts": { "dev": "father dev", "build": "npm run clean && father build", "check-deps": "father doctor", "lint": "eslint src", "clean": "rimraf dist es lib" } } --- index.js (entry) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default")); var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "_ --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/l7.js (bundled) --- !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("mapbox-gl"),require("maplibre-gl")):"function"==typeof define&&define.amd?define(["mapbox-gl","maplibre-gl"],t):"object"==typeof exports?exports.L7=t(require("mapbox-gl"),require("maplibre-gl")):e.L7=t(e.mapboxgl,e.maplibregl)}(self,(function(e,t){return function(){var n={6429:function(e,t,n){"use strict";n.d(t,{N:function(){return b},Z:function(){return b}});var r=n(3179),i=n.n(r),o=n(9563),a=n.n(o),s=n(1934),u=n.n(s),l=n(4956),c=n.n(l),h=n(4777),f=n.n(h),p=n(4395),d=n.n(p),v=n(4409),g=n.n(v),m=n(3517),y=n.n(m),_=n(4077),b=function(e){d()(n,e);var t=g()(n);function n(){var e;i()(this,n);for(var r=arguments.length,o=new Array(r),a=0;a<r;a++)o[a]=arguments[a];return e=t.call.apply(t,[this].concat(o)),y()(u()(e),"isDisable",!1),y()(u()(e),"button",void 0),y()(u()(e),"buttonText",void 0),y()(u()(e),"buttonIcon",void 0),e}return a()(n,[{key:"setIsDisable",value:function(e){var t,n;(this.isDisable=e,e)?null===(t=this.button)||void 0===t||t.setAttribute("disabled","true"):null===(n=this.button)||void 0===n||n.removeAttribute("disabled")}},{key:"createButton",value:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"";return _.SO.create("button","l7-button-control ".concat(e))}},{key:"onAdd",value:function(){this.button=this.createButton(),this.isDisable=!1;var e=this.controlOption,t=e.title,n=e.btnText,r=e.btnIcon;return this.setBtnTitle(t),this.setBtnText(n),this.setBtnIcon(r),this.button}},{key:"onRemove",value:function(){this.button=this.buttonIcon=this.buttonText=void 0,this.isDisable=!1}},{key:"setOptions",value:function(e){var t=e.title,r=e.btnText,i=e.btnIcon;this.checkUpdateOption(e,["title"])&&this.setBtnTitle(t),this.checkUpdateOption(e,["btnIcon"])&&this.setBtnIcon(i),this.checkUpdateOption(e,["btnText"])&&this.setBtnText(r),c()(f()(n.prototype),"setOptions",this).call(this,e)}},{key:"setBtnTitle",value:function(e){var t;null===(t=this.button)||void 0
