// npm package
@lint-md/cli
CLI tool to lint your markdown file for Chinese.
versions
18
maintainers
2
license
MIT
first publish
2021-03-10
publisher
yzl520
tarball
70,073 B
AUTO-PUBLISHED·1 version indexed·latest published 2023-07-12
// exfil path
what is read → where it shipssteals
- ○ home dir
sends to
(no destination string extracted — payload may be dynamic / obfuscated)
evidence in excerpt
> var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
> desc = { enumerable: true, get: function() { return m[k]; } };
> }) : (function(o, m, k, k2) {
> var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
> }) : function(o, v) {// publisher campaignby yzl520
3 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 2 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.0.0· 2 files flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @2.0.0··AUTO-PUBLISHED·publisher: yzl520heuristic 75/100static flags 2llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4123public-github-pushreads-homedir
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· 2 files flaggedpatterns: 2
--- package/package.json (excerpt) --- { "name": "@lint-md/cli", "version": "2.0.0", "description": "CLI tool to lint your markdown file for Chinese.", "main": "lib/index.js", "module": "esm/index.js", "bin": { "lint-md": "lib/lint-md.js" }, "author": "hustcc", "contributors": [ "hustcc <i@hust.cc>", "yuzhanglong <loveyzl1123@gmail.com>" ], "scripts": { "test": "jest --no-cache", "build:cjs": "tsc -p tsconfig.json --target ESNext --module commonjs --outDir lib", "build:esm": "tsc -p tsconfig.json --target ESNext --module ESNext --outDir esm", "lint": "eslint --ext .ts,.tsx ./ --fix", "build": "rm -rf esm lib && run-p build:*", "clean": "rimraf lib esm", "watch": "tsc -w", "cli-run": "node ./lib/lint-md.js examples/correct-title-trailing-punctuation.md" }, "files": [ "esm", "lib", "src" ], "keywords": [ "lint", "markdown", "lint-md", "cli" ], "jest": { "preset": "ts-jest", "testEnvironment": "node", "collectCoverage": true, "collectCoverageFrom": [ "src/**/*.{js,jsx,ts,tsx}", "!**/node_modules/**", "!**/vendor/**" ], "testMatch": [ "**/__tests__/**/?(*.)(spec|test).ts?(x)" ] }, "dependencies": { "@attachments/eslint-config": "^0.3.4", "@lint-md/core": "^2.0.0", "chalk": "^4", "commander": "^9.4.1", "fs-extra": "^10.1.0", "glob": "^8.0.3", "lodash": "^4.17.21", "piscina": "^3.2.0", "strip-ansi": "^6.0.1", "text-table" --- package/lib/utils/configure.js (excerpt) --- "use strict"; var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) { if (k2 === undefined) k2 = k; var desc = Object.getOwnPropertyDescriptor(m, k); if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) { desc = { enumerable: true, get: function() { return m[k]; } }; } Object.defineProperty(o, k2, desc); }) : (function(o, m, k, k2) { if (k2 === undefined) k2 = k; o[k2] = m[k]; })); var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) { Object.defineProperty(o, "default", { enumerable: true, value: v }); }) : function(o, v) { o["default"] = v; }); var __importStar = (this && this.__importStar) || function (mod) { if (mod && mod.__esModule) return mod; var result = {}; if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k); __setModuleDefault(result, mod); return result; }; var __importDefault = (this && this.__importDefault) || function (mod) { return (mod && mod.__esModule) ? mod : { "default": mod }; }; Object.defineProperty(exports, "__esModule", { value: true }); exports.getThreadCount = exports.getLintConfig = void 0; const fs = __importStar(require("fs")); const os_1 = require("os"); const path = __importStar(require("path")); const chalk_1 = __importDefault(require("chalk")); const lodash_1 = require("lodash"); c --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- lib/utils/lint-worker.js (bundled) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); const core_1 = require("@lint-md/core"); const lintWorker = (options) => { const { contentList, rules, isFixMode, isDev } = options; const start = new Date().getTime(); const res = contentList.map((content) => { return (0, core_1.lintMarkdown)(content, rules, isFixMode); }); const end = new Date().getTime(); if (isDev) { console.log('Group 耗时:', end - start, ' Group 长度:', contentList.length, ' 字符串长度:', contentList.reduce((acc, curr) => { return acc + curr.length; }, 0)); } return res; }; exports.default = lintWorker; //# sourceMappingURL=lint-worker.js.map --- esm/utils/lint-worker.js (bundled) --- import { lintMarkdown } from '@lint-md/core'; const lintWorker = (options) => { const { contentList, rules, isFixMode, isDev } = options; const start = new Date().getTime(); const res = contentList.map((content) => { return lintMarkdown(content, rules, isFixMode); }); const end = new Date().getTime(); if (isDev) { console.log('Group 耗时:', end - start, ' Group 长度:', contentList.length, ' 字符串长度:', contentList.reduce((acc, curr) => { return acc + curr.length; }, 0)); } return res; }; export default lintWorker; //# sourceMappingURL=lint-worker.js.map
