Package evidence

@ant-design/[email protected]

Obfuscation Density: high encoded/escaped-token density

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 1,424Niche · −30% score
Versions published: 221Established · −30% score
First published: Oct 2025
Publisher: chenshuai2144

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@ant-design/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@ant-design/[email protected]"],"fail_on":"review"}'

Publisherchenshuai2144

Artifact bytes15,503,062

Previous version2.32.41

Published2026-06-09T08:44:57.487Z

SHA-256c0edd4a1e28937b5375e21e20618ce8cdf863775ee72612cbb2a8f9f12e68f89

Why flagged

What the scanner saw

Obfuscation Density: high encoded/escaped-token density

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

4d agoLast checked

lowRisk

0Score

2.32.42Version

Status history (1 event)

new → available4d ago · risk low · score 0 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 1 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
low	Obfuscation Density	package/dist/Components/lotties/CreativeSparkLottie/creativeSpark.json	high encoded/escaped-token density	0

Manifest

Package metadata

Scripts31

bench:parsemdvitest --run src/MarkdownEditor/__tests__/editor/parseMd.benchmark.test.ts
buildfather build
build:watchfather dev
check:demonode scripts/checkDemoFiles.js
check:test-importsnode scripts/checkTestImports.js
devdumi dev
docs:builddumi build
doctorfather doctor
generate:versionnode scripts/bumpVersion.js
linteslint "{src,test}/**/*.{js,jsx,ts,tsx}" && stylelint "{src,test}/**/*.{css,less}"
lint:cssstylelint "{src,test}/**/*.{css,less}"
lint:eseslint "{src,test}/**/*.{js,jsx,ts,tsx}"
minify:lottienode scripts/minify-lottie-json.mjs
playwright:installplaywright install --with-deps chromium
preparehusky install && dumi setup
prepublishOnlynpm run build
prettierprettier --write "{src,docs,test}/**/*.{js,jsx,ts,tsx,css,less,json,md}"
previewpnpm dumi preview
report:demonode scripts/generateDemoReport.js
startpnpm run dev
strip:bomnode scripts/strip-utf8-bom.mjs
strip:bom:checknode scripts/strip-utf8-bom.mjs --check
testvitest --run
test:coveragevitest --run --coverage
test:coverage:fullnode --max-old-space-size=8192 ./node_modules/vitest/vitest.mjs --run --coverage --mode full
test:e2eplaywright test
test:e2e:debugplaywright test --debug
test:e2e:skip-servercross-env SKIP_WEBSERVER=1 playwright test
test:e2e:uiplaywright test --ui
test:fullnode --max-old-space-size=8192 ./node_modules/vitest/vitest.mjs --run --mode full
…and 1 more.

Dependencies79

@ant-design/cssinjs^1.24.0
@ant-design/cssinjs-utils^1.1.3
@ant-design/icons^5.6.1
@ant-design/pro-components^2.8.10
@ant-design/theme-token^0.0.20
@babel/runtime^7.28.6
@better-scroll/core^2.5.1
@better-scroll/mouse-wheel^2.5.1
@better-scroll/observe-dom^2.5.1
@better-scroll/scroll-bar^2.5.1
@galacean/effects^2.8.7
@juggle/resize-observer^3.4.0
@react-three/fiber^8.18.0
@schema-element-editor/host-sdk^2.2.1
@sgratzl/chartjs-chart-boxplot^4.4.5
@sofa-design/icons^1.6.2
@types/three^0.182.0
ace-builds^1.43.6
ajv^8.17.1
ajv-formats^3.0.1
antd^5.29.3
blob-util^2.0.2
chart.js^4.5.1
chartjs-plugin-datalabels^2.2.0
clsx^2.1.1
copy-to-clipboard^3.3.3
dayjs^1.11.19
diacritics^1.3.0
direction^1.0.4
dompurify^3.3.1
…and 49 more.