// npm package
@antv/my-f2
F2 for alipay mini-program
weekly
87
monthly
584
versions
33
maintainers
51
license
MIT
first publish
2017-12-07
publisher
zengyue
tarball
7,792 B
AUTO-PUBLISHED·1 version indexed·latest published 2021-12-29
// publisher campaignby zengyue
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.1.7· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.1.7··AUTO-PUBLISHED·publisher: zengyueheuristic 75/100static flags 1llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4070child-process-spawn
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// NHI intent1 target·mixed harvest patterns·gate: always - SSH private keysssh-private-keys
import F2 from '@antv/f2'; import { my as my$1 } from '@antv/f2-context';
Activation gate: fires on every run. Harvest style: mixed harvest patterns.
