// npm package
@antv/l7-renderer
versions
565
maintainers
51
license
MIT
first publish
2019-11-20
publisher
lzxue
tarball
228,089 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-11
// publisher campaignby lzxue
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.25.10· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.25.10··AUTO-PUBLISHED·publisher: lzxueheuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4049
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/l7-renderer", "version": "2.25.10", "description": "", "license": "MIT", "author": "https://github.com/orgs/antvis/people", "sideEffects": false, "main": "lib/index.js", "module": "es/index.js", "types": "es/index.d.ts", "files": [ "lib", "es" ], "dependencies": { "@antv/g-device-api": "^1.6.4", "@babel/runtime": "^7.7.7", "regl": "1.6.1", "@antv/l7-core": "2.25.10", "@antv/l7-utils": "2.25.10" }, "devDependencies": { "@antv/l7-test-utils": "^2.25.10" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "repository": "git@github.com:antvis/L7.git", "scripts": { "dev": "father dev", "build": "npm run clean && father build", "check-deps": "father doctor", "lint": "eslint src __tests__", "clean": "rimraf dist es lib" } } --- index.js (entry) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "__esModule" has not been set), then set // "default" to the CommonJS "module.exports" for node compatibility. isNodeMode || !mod || !mod.__esMo
