// npm package
@antv/x6-plugin-transform
transform plugin for X6
weekly
3,723
monthly
13,857
versions
11
maintainers
51
license
MIT
first publish
2022-11-08
publisher
newbyvector
tarball
187,907 B
AUTO-PUBLISHED·1 version indexed·latest published 2023-10-02
// publisher campaignby newbyvector
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.1.8· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
- @2.1.8··AUTO-PUBLISHED·publisher: newbyvectorheuristic 75/100static flags 1llm benign (0.85) via ollamapopularity:highmature-packageosv-flagged:MAL-2026-4111public-github-push
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
// offending code· 1 file flaggedpatterns: 1
--- package/package.json (excerpt) --- { "name": "@antv/x6-plugin-transform", "version": "2.1.8", "description": "transform plugin for X6", "main": "lib/index.js", "module": "es/index.js", "unpkg": "dist/index.js", "jsdelivr": "dist/index.js", "types": "lib/index.d.ts", "files": [ "dist", "es", "lib", "src" ], "keywords": [ "plugin", "transform", "x6", "antv" ], "peerDependencies": { "@antv/x6": "^2.x" }, "devDependencies": { "@antv/x6": "^2.x" }, "author": { "name": "bubkoo", "email": "bubkoo.wy@gmail.com" }, "license": "MIT", "homepage": "https://x6.antv.antgroup.com/tutorial/plugins/transform", "bugs": { "url": "https://github.com/antvis/x6/issues" }, "repository": { "type": "git", "url": "https://github.com/antvis/x6.git", "directory": "packages/x6-plugin-transform" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "scripts": { "clean:turbo": "rss", "clean:build": "rss", "clean:coverage": "rss", "clean": "rss", "build:esm": "rss", "build:cjs": "rss", "build:umd": "rss", "build:dev": "rss", "build:less": "rss", "build:watch": "rss", "build:watch:esm": "rss", "build:watch:cjs": "rss", "build": "rss", "prebuild": "rss", "test": "rss", "coveralls": "rss", "pretest": "rss" } } --- package.json (entry) --- { "name": "@antv/x6-plugin-transform", "version": "2.1.8", "description": "transform plugin for X6", "main": "lib/index.js", "module": "es/index.js", "unpkg": "dist/index.js", "jsdelivr": "dist/index.js", "types": "lib/index.d.ts", "files": [ "dist", "es", "lib", "src" ], "keywords": [ "plugin", "transform", "x6", "antv" ], "peerDependencies": { "@antv/x6": "^2.x" }, "devDependencies": { "@antv/x6": "^2.x" }, "author": { "name": "bubkoo", "email": "bubkoo.wy@gmail.com" }, "license": "MIT", "homepage": "https://x6.antv.antgroup.com/tutorial/plugins/transform", "bugs": { "url": "https://github.com/antvis/x6/issues" }, "repository": { "type": "git", "url": "https://github.com/antvis/x6.git", "directory": "packages/x6-plugin-transform" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "scripts": { "clean:turbo": "rss", "clean:build": "rss", "clean:coverage": "rss", "clean": "rss", "build:esm": "rss", "build:cjs": "rss", "build:umd": "rss", "build:dev": "rss", "build:less": "rss", "build: --- index.js (entry) --- "use strict"; var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; Object.defineProperty(exports, "__esModule", { value: true }); exports.Transform = void 0; const x6_1 = require("@antv/x6"); const transform_1 = require("./transform"); const raw_1 = require("./style/raw"); require("./api"); class Transform extends x6_1.Basecoat { constructor(options = {}) { super(); this.name = 'transform'; this.widgets = new Map(); this.disabled = false; this.options = options; x6_1.CssLoader.ensure(this.name, raw_1.content); } init(graph) { this.graph = graph; if (this.disabled) { return; } --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.js (bundled) --- !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("@antv/x6")):"function"==typeof define&&define.amd?define(["exports","@antv/x6"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).X6PluginTransform={},t.X6)}(this,(function(t,e){"use strict";function i(t,e,i,o){var s,n=arguments.length,r=n<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)r=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(s=t[a])&&(r=(n<3?s(r):n>3?s(e,i,r):s(e,i))||r);return n>3&&r&&Object.defineProperty(e,i,r),r}class o extends e.View{get model(){return this.graph.model}get view(){return this.graph.renderer.findViewByCell(this.node)}get containerClassName(){return this.prefixClassName("widget-transform")}get resizeClassName(){return`${this.containerClassName}-resize`}get rotateClassName(){return`${this.containerClassName}-rotate`}constructor(t,e,i){super(),this.node=e,this.graph=i,this.options=Object.assign(Object.assign({},s.defaultOptions),t),this.render(),this.startListening()}startListening(){this.delegateEvents({[`mousedown .${this.resizeClassName}`]:"startResizing",[`touchstart .${this.resizeClassName}`]:"startResizing",[`mousedown .${this.rotateClassName}`]:"startRotating",[`touchstart .${this.rotateClassName}`]:"startRotating"}),this.model.on("*",this.update,this),this.graph.on("scale",this.update,this),this.graph.on("translate",this.update,this),this.node.on("removed",this.remove,this),this.model.on("reseted",this.remove,this),this.view.on("cell:knob:mousedown",this.onKnobMouseDown,this),this.view.on("cell:knob:mouseup",this.onKnobMouseUp,this)}stopListening(){this.undelegateEvents(),this.model.off("*",this.update,this),this.graph.off("scale",this.update,this),this.graph.off("translate",this.update,this),this.node.off("removed",this.remove,this),this.model.off("reseted",this.remove,this),this.view.off("cell:knob:mousedown",this.onKnobMouseDown,this),this.view.off("
