// npm package
@spcsn/taro
SPCSN Taro runtime API entry
versions
5
maintainers
1
license
MIT
first publish
2026-05-20
publisher
specificshen
tarball
1,204,789 B
AUTO-PUBLISHED·2 versions indexed·latest published 2026-06-06
// exfil path
what is read → where it shipssteals
- ● Chromium logins
- ○ clipboard
sends to
(no destination string extracted — payload may be dynamic / obfuscated)
evidence in excerpt
> "url": "git+https://github.com/specificshen/taro-lite.git" > "url": "https://github.com/specificshen/taro-lite/issues" > "homepage": "https://github.com/specificshen/taro-lite#readme", > * original code from: https://github.com/wx-minapp/minapp-wx/blob/master/typing/wx.d.ts > * Licensed under MIT license: https://github.com/qiu8310/minapp/issues/69
// offending code· @1.0.1· 3 files flagged
- @1.0.1··AUTO-PUBLISHED·publisher: specificshenheuristic 64/100static flags 7llm skippednew-publisher:0dhas-source-repopublisher-multi-name-burst:7publisher-version-pump:16public-github-pushclipboard-accesswebhook-binreads-env-varschild-process-spawnreads-chromium-credsarchive-then-upload
// offending code· 3 files flaggedpatterns: 7
--- package/package.json (excerpt) --- { "name": "@spcsn/taro", "version": "1.0.1", "description": "SPCSN Taro runtime API entry", "author": "Samuel Ouyang", "license": "MIT", "main": "index.js", "types": "types/index.d.ts", "files": [ "index.js", "dist", "types" ], "repository": { "type": "git", "url": "git+https://github.com/specificshen/taro-lite.git" }, "bugs": { "url": "https://github.com/specificshen/taro-lite/issues" }, "homepage": "https://github.com/specificshen/taro-lite#readme", "keywords": [ "taro" ], "engines": { "node": ">= 22" }, "dependencies": { "@spcsn/taro-runtime": "1.0.1", "@spcsn/taro-shared": "1.0.1" }, "devDependencies": { "@spcsn/taro-components": "1.0.1", "@spcsn/taro-helper": "1.0.1", "@spcsn/taro-shared": "1.0.1", "rolldown": "^1.0.1" }, "peerDependencies": { "@spcsn/taro-components": "1.0.1", "@types/react": "^19" }, "peerDependenciesMeta": { "@types/react": { "optional": true } }, "scripts": { "prod": "pnpm run build", "prebuild": "pnpm run clean", "build": "pnpm run rolldown --environment NODE_ENV:production", "clean": "bun ../../scripts/clean.ts dist", "dev": "pnpm run rolldown --environment NODE_ENV:development -w", "rolldown": "rolldown --config rolldown.config.mjs" } } --- package/types/index.d.ts (excerpt) --- /** * Taro 类型定义文件 * * 目录结构 * ├── api 小程序端能力 API * │ ├── ad * │ │ └── index.d.ts 广告 API * │ ├── ai * │ │ ├── face.d.ts 人脸检测 API * │ │ ├── inference.d.ts AI 推理 API * │ │ └── visionkit.d.ts 视觉算法 API * │ ├── base * │ │ ├── index.d.ts 基础 API * │ │ ├── crypto.d.ts 基础 -> 加密 API * │ │ ├── debug.d.ts 基础 -> 调试 API * │ │ ├── env.d.ts 基础 -> ENV * │ │ ├── performance.d.ts * │ │ ├── system.d.ts 基础 -> 系统 API * │ │ ├── update.d.ts 基础 -> 更新 API * │ │ └── weapp 基础 -> 小程序 API * │ │ ├── app-event.d.ts 基础 -> 小程序 API -> 应用级事件 * │ │ └── life-cycle.d.ts 基础 -> 小程序 API -> 生命周期 * │ ├── canvas * │ │ └── index.d.ts 画布 API * │ ├── cloud * │ │ └── index.d.ts 微信小程序云开发 API * │ ├── data-analysis * │ │ └── index.d.ts 数据分析 API * │ ├── device * │ │ ├── accelerometer.d.ts 设备 -> 加速计 API * │ │ ├── accessibility.d.ts 设备 -> 无障碍 API * │ │ ├── battery.d.ts 设备 -> 电量 API * │ │ ├── bluetooth-ble.d.ts 设备 -> 蓝牙-低功耗中心设备 API * │ │ ├── bluetooth-peripheral.d.ts 设备 -> 蓝牙-低功耗外围设备 API * │ │ ├── bluetooth.d.ts 设备 -> 蓝牙-通用 API * --- package/types/taro.api.d.ts (excerpt) --- /** * * 微信端能力 * original code from: https://github.com/wx-minapp/minapp-wx/blob/master/typing/wx.d.ts * Licensed under MIT license: https://github.com/qiu8310/minapp/issues/69 * thanks for the great work by @qiu8310 ������ * */ /// <reference path="api/framework/index.d.ts" /> /// <reference path="api/base/index.d.ts" /> /// <reference path="api/base/system.d.ts" /> /// <reference path="api/base/update.d.ts" /> /// <reference path="api/base/weapp/life-cycle.d.ts" /> /// <reference path="api/base/weapp/app-event.d.ts" /> /// <reference path="api/base/debug.d.ts" /> /// <reference path="api/base/performance.d.ts" /> /// <reference path="api/base/crypto.d.ts" /> /// <reference path="api/base/env.d.ts" /> /// <reference path="api/route/index.d.ts" /> /// <reference path="api/navigate/index.d.ts" /> /// <reference path="api/share/index.d.ts" /> /// <reference path="api/ui/interaction.d.ts" /> /// <reference path="api/ui/navigation-bar.d.ts" /> /// <reference path="api/ui/background.d.ts" /> /// <reference path="api/ui/tab-bar.d.ts" /> /// <reference path="api/ui/fonts.d.ts" /> /// <reference path="api/ui/pull-down-refresh.d.ts" /> /// <reference path="api/ui/scroll.d.ts" /> /// <reference path="api/ui/animation.d.ts" /> /// <reference path="api/ui/sticky.d.ts" /> /// <reference path="api/ui/custom-component.d.ts" /> /// <reference path="api/ui/menu.d.ts" /> /// <reference path="api/ui/window.d.ts" /> /// <reference path="api/network/request.d.ts" /> /// <reference path="api
