// npm package

@antv/matrix-util

A common util collection for antv projects

npmjs.com tarball repo homepage

versions

maintainers

license

ISC

first publish

2019-04-09

publisher

kopiluwaky

tarball

19,724 B

AUTO-PUBLISHED·1 version indexed·latest published 2021-10-14

// publisher campaignby kopiluwaky

4 caught packages from this account

This is not an isolated catch. The same publisher has shipped 3 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @3.1.0-beta.3· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@3.1.0-beta.3·2021-10-14·AUTO-PUBLISHED·publisher: kopiluwaky

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-4067public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/matrix-util",
  "version": "3.1.0-beta.3",
  "description": "A common util collection for antv projects",
  "main": "lib/index.js",
  "types": "lib/index.d.ts",
  "module": "esm/index.js",
  "files": [
    "src",
    "package.json",
    "esm",
    "lib",
    "README.md"
  ],
  "scripts": {
    "build": "npm run clean && run-p build:*",
    "build:esm": "tsc -p tsconfig.json --target ES5 --module ESNext --outDir esm",
    "build:cjs": "tsc -p tsconfig.json --target ES5 --module commonjs --outDir lib",
    "clean": "rm -rf lib && rm -rf esm",
    "coverage": "npm run coverage-generator && npm run coverage-viewer",
    "coverage-generator": "torch --coverage --compile --source-pattern src/*.js,src/**/*.js --opts __tests__/mocha.opts",
    "coverage-viewer": "torch-coverage",
    "test": "torch --renderer --compile --opts __tests__/mocha.opts",
    "test-live": "torch --compile --interactive --opts __tests__/mocha.opts",
    "tsc": "tsc --noEmit",
    "typecheck": "tsc --noEmit"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/antvis/util.git"
  },
  "keywords": [
    "util",
    "antv",
    "g"
  ],
  "author": "https://github.com/orgs/antvis/people",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/antvis/util/issues"
  },
  "devDependencies": {
    "@antv/torch": "^1.0.0",
    "chai": "^4.2.0",
    "less": "^3.9.0",
    "npm-run-all": "^4.1.5"
  },
  "homepage": "https://github.com/antvis/util#readme",
  "dependencie