All @antv/g6-extension-react versions
@antv/g6-extension-react @0.3.7
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
100
Risk Score
MIT
License
Yes
Install Scripts
2
Dependencies
9
Dev Dependencies
735.0 KB
Package Size
Published
Using React Component to Define Your G6 Graph Node
Maintainers
lviseifreestyle21soundquietelaine.q.10sturubysakuya223serializedowenxdzhaoyangzhanmeiwjgogogoleungwensendoriiaaronyardsimaqdxq613intchoussusan_annjinke.lilzxuearmy8735atoolbaizndengfupingneoddishjeffy2012zqluafc163pomelo-nwukopiluwakyccnuzindexpanyuqibubkoozengyuekasmineboyu.zljl1ud0ngq1newbyvectorwinniexingchenlulikn9117xdddstsemious2020esoranadia_liubbsqqmxz96102openwaynepearminipddpdyiqianyaozhanbacxxxxxnlaixingui.lxgsusiwen8yanxiongzeyuwangrainy25ghzzhangjunjie-lokiflash1yisi.wangdreammy23biupiubiupiubasketduckxuying1027banxuanpearl_wangbqxbqxbqxalex_zjtduxinyue023wang1212leondt1gaofuhong
Keywords
antvg6extensionreactnode
Dependencies (2)
| Package | Constraint | Registry Status |
|---|---|---|
| @antv/g | ^6.1.24 | auto_approved |
| @antv/g-svg | ^2.0.38 | auto_approved |
Dev Dependencies (9)
| Package | Constraint | Registry Status |
|---|---|---|
| antd | ^5.25.1 | No greenflagged match |
| react | ^19.1.0 | auto_approved |
| @antv/g6 | 5.1.0 | auto_approved |
| react-dom | ^19.1.0 | auto_approved |
| @types/react | ^19.1.4 | auto_approved |
| @types/react-dom | ^19.1.5 | auto_approved |
| react-router-dom | ^6.30.0 | auto_approved |
| @ant-design/icons | ^5.6.1 | auto_approved |
| styled-components | ^6.1.18 | auto_approved |
Transitive Dependency Tree
62 transitive deps
max depth 6
├─
@antv/g
^6.1.24
→ 6.3.1
├─
@antv/g-svg
^2.0.38
→ 2.1.1
├─
@antv/g-lite
2.7.0
→ 2.7.0
├─
@antv/util
^3.3.5
→ 3.3.11
├─
@babel/runtime
^7.25.6
→ 7.29.7
├─
gl-matrix
^3.4.3
→ 3.4.4
├─
html2canvas
^1.4.1
→ 1.4.1
├─
tslib
^2.5.3
→ 2.8.1
├─
@antv/g-math
3.1.0
→ 3.1.0
├─
@antv/vendor
^1.0.3
→ 1.0.11
├─
eventemitter3
^5.0.1
→ 5.0.4
├─
fast-deep-equal
^3.1.3
→ 3.1.3
├─
@types/d3-array
^3.2.1
→ 3.2.2
├─
@types/d3-color
^3.1.3
→ 3.1.3
├─
@types/d3-dispatch
^3.0.6
→ 3.0.7
├─
@types/d3-dsv
^3.0.7
→ 3.0.7
├─
@types/d3-ease
^3.0.2
→ 3.0.2
├─
@types/d3-fetch
^3.0.7
→ 3.0.7
├─
@types/d3-force
^3.0.10
→ 3.0.10
├─
@types/d3-format
^3.0.4
→ 3.0.4
├─
@types/d3-geo
^3.1.0
→ 3.1.0
├─
@types/d3-hierarchy
^3.1.7
→ 3.1.7
├─
@types/d3-interpolate
^3.0.4
→ 3.0.4
├─
@types/d3-path
^3.1.0
→ 3.1.1
├─
@types/d3-quadtree
^3.0.6
→ 3.0.6
├─
@types/d3-random
^3.0.3
→ 3.0.3
├─
@types/d3-scale
^4.0.9
→ 4.0.9
├─
@types/d3-scale-chromatic
^3.1.0
→ 3.1.0
├─
@types/d3-shape
^3.1.7
→ 3.1.8
├─
@types/d3-time
^3.0.4
→ 3.0.4
├─
@types/d3-timer
^3.0.2
→ 3.0.2
├─
d3-array
^3.2.4
├─
d3-color
^3.1.0
→ 3.1.0
├─
d3-dispatch
^3.0.1
→ 3.0.1
├─
d3-dsv
^3.0.1
→ 3.0.1
├─
d3-ease
^3.0.1
→ 3.0.1
├─
d3-fetch
^3.0.1
→ 3.0.1
├─
d3-force
^3.0.0
→ 3.0.0
├─
d3-force-3d
^3.0.5
→ 3.0.6
├─
d3-format
^3.1.0
→ 3.1.2
├─
d3-geo
^3.1.1
→ 3.1.1
├─
d3-geo-projection
^4.0.0
→ 4.0.0
├─
d3-hierarchy
^3.1.2
→ 3.1.2
├─
d3-interpolate
^3.0.1
→ 3.0.1
├─
d3-path
^3.1.0
→ 3.1.0
├─
d3-quadtree
^3.0.1
→ 3.0.1
├─
d3-random
^3.0.1
→ 3.0.1
├─
d3-regression
^1.3.10
→ 1.3.10
├─
d3-scale
^4.0.2
→ 4.0.2
├─
d3-scale-chromatic
^3.1.0
→ 3.1.0
├─
d3-shape
^3.2.0
→ 3.2.0
├─
d3-time
^3.1.0
→ 3.1.0
├─
d3-timer
^3.0.1
→ 3.0.1
├─
@types/geojson
*
→ 7946.0.16
├─
commander
7
→ 7.2.0
├─
d3-binarytree
1
→ 1.0.2
├─
d3-octree
1
→ 1.1.0
├─
d3-time-format
2 - 4
→ 4.1.0
├─
iconv-lite
0.6
→ 0.6.3
├─
rw
1
→ 1.3.3
├─
internmap
1 - 2
→ 2.0.3
├─
safer-buffer
>= 2.1.2 < 3.0.0
→ 2.1.2
Changes from v0.2.7
Dependency Changes
Script Changes
+ preinstallFile Changes
1 added
0 removed
1 modified
size delta: +486.9 KB
Risk Dispositions (0 applicable to this version, 6 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
Show 6 disposition(s) that do not match any finding on this version
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
install-script:preinstall |
install-scripts | reject | AI | AI (install-scripts): Malicious preinstall running obfuscated payload; generalizes to any version carrying this script. | |
obfuscated-file:index.js |
source-diff | reject | AI | AI (source-diff): Obfuscated index.js is the attack payload; reject for all versions containing it. | |
url-dep:@antv/setup |
npm-metadata | reject | AI | AI (npm-metadata): SHA-pinned GitHub dep in optionalDependencies is attack infrastructure. | |
semgrep:env-spread |
semgrep | reject | AI | AI (semgrep): Env-spread in obfuscated payload exfiltrates secrets. | |
semgrep:obfuscation-while-true |
semgrep | reject | AI | AI (semgrep): javascript-obfuscator output in attack payload. | |
semgrep:obfuscation-hex-functions |
semgrep | reject | AI | AI (semgrep): Hex-named functions are part of the obfuscated attack payload. |
Review Summary
Risk score: 100 (capped from 248). Findings: 9 high (+225), 2 medium (+20), 1 low (+3), 1 info (+0).
Published to npm: