// npm package

jest-expect

Make jest expect more convenient.

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2018-04-26

publisher

atool

tarball

7,311 B

AUTO-PUBLISHED·1 version indexed·latest published 2018-04-26

// publisher campaignby atool

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.0.1· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@0.0.1·2018-04-26·AUTO-PUBLISHED·publisher: atool

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

first-version-of-packagepublisher-multi-name-burst:5osv-flagged:MAL-2026-4139public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "jest-expect",
  "version": "0.0.1",
  "description": "Make jest expect more convenient.",
  "main": "lib/index.js",
  "scripts": {
    "test": "jest",
    "build": "babel src --out-dir lib",
    "coveralls": "cat ./coverage/lcov.info | coveralls"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/hustcc/jest-expect.git"
  },
  "keywords": [
    "jest",
    "expect",
    "assertion",
    "jest-extended"
  ],
  "author": "hustcc",
  "license": "MIT",
  "bugs": {
    "url": "https://github.com/hustcc/jest-expect/issues"
  },
  "homepage": "https://github.com/hustcc/jest-expect#readme",

  "dependencies": {
    "fixed-round": "^1.0.0",
    "jest-extended": "^0.7.1"
  },
  "devDependencies": {
    "babel-cli": "^6.26.0",
    "babel-jest": "^22.0.4",
    "babel-preset-env": "^1.6.1",
    "coveralls": "^3.0.0",
    "jest": "^22.4.2"
  },
  "jest": {
    "testRegex": "/__tests__/.*.js$",
    "collectCoverage": true,
    "setupFiles": [],
    "setupTestFrameworkScriptFile": "./src/index.js",
    "collectCoverageFrom": [
      "src/**/*.{js}"
    ]
  }
}


--- package.json (entry) ---
{
  "name": "jest-expect",
  "version": "0.0.1",
  "description": "Make jest expect more convenient.",
  "main": "lib/index.js",
  "scripts": {
    "test": "jest",
    "build": "babel src --out-dir lib",
    "coveralls": "cat ./coverage/lcov.info | coveralls"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/hustcc/jest-expect.git"
  },
  "keywords": [
    "jest",
    "expect",
    "assertion",
    "jest-extended"
  ],
  "author": "hustcc",
  "license": "MIT",
  "bugs": {
    "url": "https://github.com/hustcc/jest-expect/issues"
  },
  "homepage": "https://github.com/hustcc/jest-expect#readme",

  "dependencies": {
    "fixed-round": "^1.0.0",
    "jest-extended": "^0.7.1"
  },
  "devDependencies": {
    "babel-cli": "^6.26.0",
    "babel-jest": "^22.0.4",
    "babel-preset-env": "^1.6.1",
    "coveralls": "^3.0.0",
    "jest": "^22.4.2"
  },
  "jest": {
    "testRegex": "/__tests__/.*.js$",
    "collectCoverage": true,
    "setupFiles": [],
    "setupTestFrameworkScriptFile": "./src/index.js",
    "collectCoverageFrom": [
      "src/**/*.{js}"
    ]
  }
}


--- index.js (entry) ---
/**
 * Created by hustcc 18/4/26.
 * Contract: i@hust.cc
 */

// use jest-extended
import 'jest-extended';

import { toBeApproximate } from './toBeApproximate';

const jestExpect = global.expect;

// 扩展 expect
jestExpect.extend({
  toBeApproximate,
});


--- bundled output (OSV-MAL flagged — LLM scope expansion) ---

--- __tests__/jest-extended.js (bundled) ---
/**
 * Created by xiaowei.wzw on 18/4/26.
 * Contract: xiaowei.wzw@antfin.com
 */


describe('jest-extended', () => {
  test('toBeWithin', () => {
    expect(Math.PI).toBeWithin(3, 4);
  });
});