// npm package
@antv/l7-maps
Maps for L7
versions
565
maintainers
51
license
MIT
first publish
2019-11-20
publisher
lzxue
tarball
994,363 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-11
// publisher campaignby lzxue
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.25.10· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.25.10··AUTO-PUBLISHED·publisher: lzxueheuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4045
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/l7-maps", "version": "2.25.10", "description": "Maps for L7", "license": "MIT", "author": "https://github.com/orgs/antvis/people", "sideEffects": [ "**/*.css" ], "main": "lib/index.js", "unpkg": "dist/l7-maps.min.js", "module": "es/index.js", "types": "es/index.d.ts", "files": [ "dist", "lib", "es", "!dist/report.html" ], "dependencies": { "@amap/amap-jsapi-loader": "^1.0.1", "@babel/runtime": "^7.7.7", "eventemitter3": "^4.0.0", "gl-matrix": "^3.1.0", "mapbox-gl": "^1.2.1", "maplibre-gl": "^3.5.2", "viewport-mercator-project": "^6.2.1", "pmtiles": "^2.7.2", "@antv/l7-core": "2.25.10", "@antv/l7-map": "2.25.10", "@antv/l7-utils": "2.25.10" }, "devDependencies": { "@map-component/tmap-types": "^0.1.3", "@types/amap-js-api": "^1.4.6", "@types/bmapgl": "^0.0.7", "@types/gl-matrix": "^2.4.5", "@types/google.maps": "^3.54.10", "@types/mapbox-gl": "^1.11.2", "@types/viewport-mercator-project": "^6.1.0" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "repository": "git@github.com:antvis/L7.git", --- index.js (entry) --- "use strict"; var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault"); Object.defineProperty(exports, "__esModule", { value: true }); var _exportNames = { GaodeMap: true, GaodeMapV1: true, GaodeMapV2: true, BaiduMap: true, Earth: true, GoogleMap: true, Map: true, Mapbox: true, MapLibre: true, TMap: true, TencentMap: true, Viewport: true }; Object.defineProperty(exports, "BaiduMap", { enumerable: true, get: function () { return _bmap.default; } }); Object.defineProperty(exports, "Earth", { enumerable: true, get: function () { return _earth.default; } }); exports.GaodeMapV2 = exports.GaodeMapV1 = exports.GaodeMap = void 0; Object.defineProperty(exports, "GoogleMap", { enumerable: true, get: function () { return _gmap.default; } }); Object.defineProperty(exports, "Map", { enumerable: true, get: function () { return _map.default; } }); Object.defineProperty(exports, "MapLibre", { enumerable: true, get: function () { return _maplibre.default; } }); Object.defineProperty(exports, "Mapbox", { enumerable: true, get: function () { return _mapbox.default; } }); Object.definePro --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- lib/lib/web-mercator-viewport.js (bundled) --- "use strict"; var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault"); Object.defineProperty(exports, "__esModule", { value: true }); exports.default = void 0; var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2")); var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty")); var _viewportMercatorProject = _interopRequireDefault(require("viewport-mercator-project")); class Viewport { constructor() { (0, _defineProperty2.default)(this, "viewport", new _viewportMercatorProject.default()); } syncWithMapCamera(mapCamera) { const { center, zoom, pitch, bearing, viewportHeight, viewportWidth } = mapCamera; const preView = { width: this.viewport.width, height: this.viewport.height, longitude: this.viewport.center[0], latitude: this.viewport.center[1], zoom: this.viewport.zoom, pitch: this.viewport.pitch, bearing: this.viewport.bearing }; this.viewport = new _viewportMercatorProject.default((0, _objectSpread2.default)((0, _objectSpread2.default)({}, preView), {}, { width: viewportWidth, height: viewportHeight, longitude: center && center[0], latitude: center && center[1], zoom, pitch, bearing })); } getZoom() { return this.viewport.zoom; } getZoomScale() { return Math.pow(2, this.getZoom()); } getCenter() { return [this.viewport.longitude, this.viewport.latitude]; } getProjectionMatrix() { return this.viewport.projectionMatrix; } getModelMatrix() { return [1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1]; } getViewMatrix() { return this.viewport.viewMatrix; } getViewMatrixUncentered() { // @ts-ignore return this.viewport.viewMatrixUncentered; } getViewProjectionMatrix() { // @ts-ignore return this.viewport.viewProjectionMatrix; } getViewProjecti --- es/lib/web-mercator-viewport.js (bundled) --- import _objectSpread from "@babel/runtime/helpers/esm/objectSpread2"; import _defineProperty from "@babel/runtime/helpers/esm/defineProperty"; import WebMercatorViewport from 'viewport-mercator-project'; export default class Viewport { constructor() { _defineProperty(this, "viewport", new WebMercatorViewport()); } syncWithMapCamera(mapCamera) { const { center, zoom, pitch, bearing, viewportHeight, viewportWidth } = mapCamera; const preView = { width: this.viewport.width, height: this.viewport.height, longitude: this.viewport.center[0], latitude: this.viewport.center[1], zoom: this.viewport.zoom, pitch: this.viewport.pitch, bearing: this.viewport.bearing }; this.viewport = new WebMercatorViewport(_objectSpread(_objectSpread({}, preView), {}, { width: viewportWidth, height: viewportHeight, longitude: center && center[0], latitude: center && center[1], zoom, pitch, bearing })); } getZoom() { return this.viewport.zoom; } getZoomScale() { return Math.pow(2, this.getZoom()); } getCenter() { return [this.viewport.longitude, this.viewport.latitude]; } getProjectionMatrix() { return this.viewport.projectionMatrix; } getModelMatrix() { return [1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 1]; } getViewMatrix() { return this.viewport.viewMatrix; } getViewMatrixUncentered() { // @ts-ignore return this.viewport.viewMatrixUncentered; } getViewProjectionMatrix() { // @ts-ignore return this.viewport.viewProjectionMatrix; } getViewProjectionMatrixUncentered() { // @ts-ignore return this.viewport.viewProjectionMatrix; } getFocalDistance() { return 1; } projectFlat(lngLat, scale) { return this.viewport.projectFlat(lngLat, scale); } } --- dist/l7-maps.min.js (bundled) --- !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e(require("mapbox-gl"),require("maplibre-gl")):"function"==typeof define&&define.amd?define(["mapbox-gl","maplibre-gl"],e):"object"==typeof exports?exports.L7Maps=e(require("mapbox-gl"),require("maplibre-gl")):t.L7Maps=e(t.mapboxgl,t.maplibregl)}(self,(function(t,e){return function(){var n={6567:function(){},3813:function(){},3542:function(){},8167:function(){},1223:function(){},912:function(){},4437:function(){},9585:function(){},7997:function(){},500:function(){},2290:function(){},1384:function(){},9884:function(){},5112:function(){},775:function(){},3442:function(){},2090:function(t,e,n){"use strict";var i,r,a,o=n(1783).default;a=function(){function t(t){var i=[];return t.AMapUI&&i.push(e(t.AMapUI)),t.Loca&&i.push(n(t.Loca)),Promise.all(i)}function e(t){return new Promise((function(e,n){var r=[];if(t.plugins)for(var l=0;l<t.plugins.length;l+=1)-1==a.AMapUI.plugins.indexOf(t.plugins[l])&&r.push(t.plugins[l]);if(o.AMapUI===i.failed)n("前次请求 AMapUI 失败");else if(o.AMapUI===i.notload){o.AMapUI=i.loading,a.AMapUI.version=t.version||a.AMapUI.version,l=a.AMapUI.version;var c=document.body||document.head,u=document.createElement("script");u.type="text/javascript",u.src="https://webapi.amap.com/ui/"+l+"/main.js",u.onerror=function(t){o.AMapUI=i.failed,n("请求 AMapUI 失败")},u.onload=function(){if(o.AMapUI=i.loaded,r.length)window.AMapUI.loadUI(r,(function(){for(var t=0,n=r.length;t<n;t++){var i=r[t].split("/").slice(-1)[0];window.AMapUI[i]=arguments[t]}for(e();s.AMapUI.length;)s.AMapUI.splice(0,1)[0]()}));else for(e();s.AMapUI.length;)s.AMapUI.splice(0,1)[0]()},c.appendChild(u)}else o.AMapUI===i.loaded?t.version&&t.version!==a.AMapUI.version?n("不允许多个版本 AMapUI 混用"):r.length?window.AMapUI.loadUI(r,(function(){for(var t=0,n=r.length;t<n;t++){var i=r[t].split("/").slice(-1)[0];window.AMapUI[i]=arguments[t]}e()})):e():t.version&&t.version!==a.AMapUI.version?n("不允许多个版本 AMapUI 混用"):s.AMapUI.push((function(
