// npm package
reducs
A sane implementation of Redux
versions
5
maintainers
1
license
GPL
first publish
2018-04-01
publisher
mercmobily
tarball
970 B
AUTO-PUBLISHED·1 version indexed·latest published 2019-10-27
// publisher campaignby mercmobily
2 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.0.1· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
- @1.0.1··AUTO-PUBLISHED·publisher: mercmobilyheuristic 87/100static flags 0llm benign (0.85) via ollamarecent-owner-changetypo-match:redux:d2publisher-multi-name-burst:38publisher-version-pump:39dormant-takeover:prev=iman@1.0.0
→ No suspicious destination, no remote-exec shape — 2 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "reducs", "author": "Tony Mobily", "description": "", "license": "ISC", "main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "version": "1.0.1" } --- index.js (entry) --- let state = null const beforeSetStateCallbacks = [] const afterSetStateCallbacks = [] export const beforeSetState = (fn) => beforeSetStateCallbacks.push(fn) export const afterSetState = (fn) => afterSetStateCallbacks.push(fn) export const setState = async (key, value) => { if (state === null) state = {} for (const fn of beforeSetStateCallbacks) await fn(key, value) if (typeof value === 'object' && value !== null) { if (Array.isArray(value)) state[key] = [...value] else state[key] = { ...value } } else { state[key] = value } for (const fn of afterSetStateCallbacks) await fn(key, value) } export const stateEmpty = () => { return !state } export const getState = (key) => { if (!state) return null return state[key] }
