Supply Chain Incidents

MAL-2026-3930

Malicious code in @antv/g-perf (npm)

MAL-2026-3894

Malicious code in @antv/f2-my (npm)

MAL-2026-4074

Malicious code in @antv/narrative-text-vis (npm)

MAL-2026-4120

Malicious code in @antv/xflow-diff (npm)

MAL-2026-3888

Malicious code in @antv/f-wx (npm)

MAL-2026-3946

Malicious code in @antv/g-plugin-html-renderer (npm)

MAL-2026-3972

Malicious code in @antv/g-webgpu-unitchart (npm)

MAL-2026-3975

Malicious code in @antv/g2-extension-3d (npm)

MAL-2026-3999

Malicious code in @antv/geo-coord (npm)

MAL-2026-4086

Malicious code in @antv/stat (npm)

MAL-2026-4009

Malicious code in @antv/gi-assets-tugraph-analytics (npm)

MAL-2026-4156

Malicious code in timeago.js (npm)

MAL-2026-3898

Malicious code in @antv/f2-wordcloud (npm)

MAL-2026-4088

Malicious code in @antv/thumbnails (npm)

MAL-2026-3964

Malicious code in @antv/g-web-components (npm)

MAL-2026-4145

Malicious code in lint-md-cli (npm)

MAL-2026-4133

Malicious code in filesize.js (npm)

MAL-2026-4036

Malicious code in @antv/l7-core (npm)

MAL-2026-4064

Malicious code in @antv/li-sam-assets (npm)

MAL-2026-3860

Malicious code in @antv/ckb (npm)

MAL-2026-4068

Malicious code in @antv/mcp-server-antv (npm)

MAL-2026-4134

Malicious code in fixed-round (npm)

MAL-2026-3997

Malicious code in @antv/g6-wx (npm)

MAL-2026-3883

Malicious code in @antv/f-lottie (npm)