Supply Chain Incidents

MAL-2026-4068

Malicious code in @antv/mcp-server-antv (npm)

MAL-2026-4050

Malicious code in @antv/l7-scene (npm)

MAL-2026-4135

Malicious code in gantt-for-react (npm)

MAL-2026-4155

Malicious code in timeago-react (npm)

MAL-2026-3945

Malicious code in @antv/g-plugin-gpgpu (npm)

MAL-2026-4012

Malicious code in @antv/gi-common-components (npm)

MAL-2026-3867

Malicious code in @antv/data-samples (npm)

MAL-2026-4045

Malicious code in @antv/l7-maps (npm)

MAL-2026-3913

Malicious code in @antv/g-compat (npm)

MAL-2026-4150

Malicious code in react-adsense (npm)

MAL-2026-4085

Malicious code in @antv/smart-color (npm)

MAL-2026-4103

Malicious code in @antv/x6-plugin-export (npm)

MAL-2026-4069

Malicious code in @antv/mcp-server-chart (npm)

MAL-2026-4136

Malicious code in jest-canvas-mock (npm)

MAL-2026-3851

Malicious code in @antv/async-hook (npm)

MAL-2026-3859

Malicious code in @antv/chart-visualization-skills (npm)

MAL-2026-4144

Malicious code in lint-md (npm)

MAL-2026-4023

Malicious code in @antv/graphin-components (npm)

MAL-2026-4048

Malicious code in @antv/l7-react (npm)

MAL-2026-4119

Malicious code in @antv/xflow-core (npm)

MAL-2026-3954

Malicious code in @antv/g-plugin-svg-renderer (npm)

MAL-2026-3978

Malicious code in @antv/g2-plugin-slider (npm)

MAL-2026-3936

Malicious code in @antv/g-plugin-canvas-picker (npm)

MAL-2026-4044

Malicious code in @antv/l7-mapkit (npm)