// Data staging

Static pattern: archive-then-upload

패턴: archive-then-upload

Packages whose static analysis matched this pattern. See the per-package detail pages for the offending code excerpt.

3개 패키지에 이 패턴이 매칭됨. 최신순.

• AUTO-PUBLISHED/npm/2026-03-29/MAL-2026-3847

  openclaw-cn@0.2.0

  by jiulingyun

  Openclaw 中文版 - WhatsApp gateway CLI (Baileys web) with Pi RPC agent

  steals →AI API keys→ sends tohttps://api.openai.com/v1/audio/transcriptions

  archive-then-uploadreads-ai-api-keysreads-env-varsbase64-decodepy-urllib-requestchild-process-spawnpublic-github-push
• AUTO-PUBLISHED/npm/2023-07-21/MAL-2026-4014

  @antv/gi-public-data@1.0.1

  by pomelo-nwu

  G6VP public data

  → sends tohttps://github.com/antvis/G6VP.git

  public-github-pusharchive-then-upload

  → 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

  weekly

  —

  /wk

  llm verdict

  benign 0.85
• AUTO-PUBLISHED/npm/2023-03-11/MAL-2026-4013

  @antv/gi-mock-data@1.0.5

  by pomelo-nwu

  G6VP MOCK DATA

  → sends tohttps://github.com/antvis/G6VP.git

  public-github-pusharchive-then-upload

  → 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

  weekly

  50

  /wk

  llm verdict

  benign 0.85