// npm package

@antv/x6-react-components

React components for building x6 editors

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2020-10-14

publisher

newbyvector

tarball

921,743 B

AUTO-PUBLISHED·1 version indexed·latest published 2025-04-20

// publisher campaignby newbyvector

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @2.0.9· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@2.0.9·2025-04-20·AUTO-PUBLISHED·publisher: newbyvector

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-4113public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "@antv/x6-react-components",
  "version": "2.0.9",
  "description": "React components for building x6 editors",
  "main": "lib/index.js",
  "module": "es/index.js",
  "unpkg": "dist/index.js",
  "jsdelivr": "dist/index.js",
  "types": "lib/index.d.ts",
  "files": [
    "dist",
    "es",
    "lib",
    "src"
  ],
  "sideEffects": [
    "es/**/style/*",
    "lib/**/style/*",
    "*.less"
  ],
  "keywords": [
    "component",
    "components",
    "react-components",
    "x6",
    "x6-editor",
    "editor",
    "ui",
    "antv"
  ],
  "peerDependencies": {
    "antd": ">=4.4.2 || >=5.0.0",
    "react": "^18.0.0",
    "react-dom": "^18.0.0"
  },
  "dependencies": {
    "clamp": "^1.0.1",
    "classnames": "^2.2.6",
    "rc-dropdown": "^3.0.0-alpha.0",
    "rc-util": "^4.15.7",
    "react-color": "2.19.3",
    "react-resize-detector": "^7.0.0",
    "ua-parser-js": "^0.7.20"
  },
  "devDependencies": {
    "@types/react": "^18.0.0",
    "@types/react-color": "^3.0.1",
    "@types/react-dom": "^18.0.9",
    "@types/react-resize-detector": "^6.1.0",
    "@types/ua-parser-js": "^0.7.33",
    "antd": "^5.0.3",
    "react": "^18.0.0",
    "react-dom": "^18.0.0"
  },
  "author": {
    "name": "bubkoo",
    "email": "bubkoo.wy@gmail.com"
  },
  "license": "MIT",
  "homepage": "https://x6.antv.antgroup.com",
  "bugs": {
    "url": "https://github.com/antvis/x6/issues"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/antvis/x6.git",
    "directory": "pack