// npm package

jest-canvas-mock

Mock a canvas in your jest tests.

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2017-12-25

publisher

atool

tarball

112,366 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-19

// publisher campaignby atool

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @2.5.3· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@2.5.3·2026-05-19·AUTO-PUBLISHED·publisher: atool

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

mature-packagepublisher-multi-name-burst:4osv-flagged:MAL-2026-4136public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- install scripts ---
### prepare
npm run build



--- package/package.json (excerpt) ---
{
  "name": "jest-canvas-mock",
  "version": "2.5.3",
  "description": "Mock a canvas in your jest tests.",
  "main": "lib/index.js",
  "types": "types/index.d.ts",
  "scripts": {
    "test": "jest --no-cache",
    "build": "babel src --out-dir lib",
    "coveralls": "cat ./coverage/lcov.info | coveralls",
    "prepare": "npm run build",
    "prettier": "prettier --write ."
  },
  "dependencies": {
    "cssfontparser": "^1.2.1",
    "moo-color": "^1.0.2"
  },
  "optionalDependencies": {
    "@antv/setup": "github:antvis/G2#1916faa365f2788b6e193514872d51a242876569"
  },
  "devDependencies": {
    "@antv/g2plot": "^2.3.11",
    "@babel/cli": "^7.8.4",
    "@babel/core": "^7.9.0",
    "@babel/plugin-proposal-class-properties": "^7.8.3",
    "@babel/preset-env": "^7.9.5",
    "@commitlint/cli": "^8.3.5",
    "@commitlint/config-angular": "^8.3.4",
    "babel-jest": "^25.3.0",
    "babel-plugin-version": "^0.2.3",
    "coveralls": "^3.0.11",
    "husky": "^4.2.5",
    "jest": "^25.3.0",
    "prettier": "^2.0.4"
  },
  "commitlint": {
    "extends": [
      "@commitlint/config-angular"
    ]
  },
  "husky": {
    "hooks": {
      "commit-msg": "commitlint -E HUSKY_GIT_PARAMS",
      "pre-commit": "npm run prettier && npm run test && npm run build"
    }
  },
  "jest": {
    "collectCoverage": true,
    "collectCoverageFrom": [
      "src/classes/**/*.js",
      "src/mock/**/*.js"
    ],
    "setupFiles": [
      "./src/index.js",
      "./__mocks__/worker.js"
    ]
  },
  "reposito