// npm package
@antv/x6-react-shape
X6 shape for rendering react components.
versions
162
maintainers
51
license
MIT
first publish
2019-12-25
publisher
gaofuhong
tarball
1,069,430 B
AUTO-PUBLISHED·1 version indexed·latest published 2025-11-27
// publisher campaignby gaofuhong
4 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 3 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @3.0.1· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
- @3.0.1··AUTO-PUBLISHED·publisher: gaofuhongheuristic 75/100static flags 1llm benign (0.85) via ollamatarball-size-jump:15xmature-packageosv-flagged:MAL-2026-4114public-github-push
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
// offending code· 1 file flaggedpatterns: 1
--- package/package.json (excerpt) --- { "name": "@antv/x6-react-shape", "version": "3.0.1", "description": "X6 shape for rendering react components.", "main": "lib/index.js", "module": "es/index.js", "unpkg": "dist/index.js", "jsdelivr": "dist/index.js", "types": "lib/index.d.ts", "files": [ "dist", "es", "lib", "src" ], "keywords": [ "shape", "react", "render", "x6", "antv" ], "peerDependencies": { "@antv/x6": "^3.x", "react": ">=18.0.0", "react-dom": ">= 18.0.0" }, "devDependencies": { "@antv/x6": "^3.x", "@types/react": "^18.0.25", "@types/react-dom": "^18.0.9", "react": "^18.0.0", "react-dom": "^18.0.0", "vite": "^7.1.2", "@vitejs/plugin-react": "^5.0.2" }, "author": { "name": "bubkoo", "email": "bubkoo.wy@gmail.com" }, "license": "MIT", "homepage": "https://x6.antv.antgroup.com/tutorial/intermediate/react", "bugs": { "url": "https://github.com/antvis/x6/issues" }, "repository": { "type": "git", "url": "https://github.com/antvis/x6.git", "directory": "packages/x6-react-shape" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "scripts": { "start": "vite", "build": "run-s clean build:esm build:cjs build:umd", "clean": "rimraf dist es lib", "build:esm": "tsc --module esnext --target es6 --outDir ./es", "build:cjs": "tsc --module commonjs --target es6 --outDir ./lib", "build:umd": "pnpm run --if --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/x6-react-shape.min.js (bundled) --- !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).X6ReactShape={})}(this,function(e){"use strict";function t(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var i=0;for(r=Object.getOwnPropertySymbols(e);i<r.length;i++)t.indexOf(r[i])<0&&Object.prototype.propertyIsEnumerable.call(e,r[i])&&(n[r[i]]=e[r[i]])}return n}function n(e,t,n,r){var i,o=arguments.length,s=o<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(s=(o<3?i(s):o>3?i(t,n,s):i(t,n))||s);return o>3&&s&&Object.defineProperty(t,n,s),s}function r(e,t,n,r){return new(n||(n=Promise))(function(i,o){function s(e){try{l(r.next(e))}catch(e){o(e)}}function a(e){try{l(r.throw(e))}catch(e){o(e)}}function l(e){var t;e.done?i(e.value):(t=e.value,t instanceof n?t:new n(function(e){e(t)})).then(s,a)}l((r=r.apply(e,t||[])).next())})}"function"==typeof SuppressedError&&SuppressedError,"object"==typeof window&&window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),"undefined"!=typeof window&&[Element.prototype,Document.prototype,DocumentFragment.prototype].forEach(e=>{Object.hasOwn(e,"append")||Object.defineProperty(e,"append",{configurable:!0,enumerable:!0,writable:!0,value(...e){const t=document.createDocumentFragment();e.forEach(e=>{const n=e instanceof Node;t.appendChild(n?e:document.createTextNode(String(e)))}),this.appendChild(t)}})});var i="object"==typeof global&&global&&global.Object===Object&&global,o="object"==typeof self&&self&&self.Object===Object&&self,s=i||o||Function("return this")(),a=s.Symbol,l=Object.prototype,u=l.hasOwnProperty,c=l.toString,h=a?a.toStringTag:void 0;var
