Supply Chain Incidents

MAL-2026-4109

Malicious code in @antv/x6-plugin-snapline (npm)

MAL-2026-4007

Malicious code in @antv/gi-assets-scene (npm)

MAL-2026-3899

Malicious code in @antv/f2-wx (npm)

MAL-2026-3943

Malicious code in @antv/g-plugin-dragndrop (npm)

MAL-2026-3921

Malicious code in @antv/g-lite (npm)

MAL-2026-3849

Malicious code in @antv/adjust (npm)

MAL-2026-4047

Malicious code in @antv/l7-pass (npm)

MAL-2026-3989

Malicious code in @antv/g6-extension-react (npm)

MAL-2026-3909

Malicious code in @antv/g-base (npm)

MAL-2026-4122

Malicious code in @antv/xflow-hook (npm)

MAL-2026-3878

Malicious code in @antv/dw-util (npm)

MAL-2026-4142

Malicious code in jest-url-loader (npm)

MAL-2026-3891

Malicious code in @antv/f2-canvas (npm)

MAL-2026-4054

Malicious code in @antv/l7plot (npm)

MAL-2026-3856

Malicious code in @antv/calendar-heatmap (npm)

MAL-2026-3927

Malicious code in @antv/g-mobile-svg (npm)

MAL-2026-3951

Malicious code in @antv/g-plugin-rough-canvas-renderer (npm)

MAL-2026-4081

Malicious code in @antv/s2-vue (npm)

MAL-2026-3904

Malicious code in @antv/f6-hammerjs (npm)

MAL-2026-4129

Malicious code in babel-plugin-version (npm)

MAL-2026-4001

Malicious code in @antv/gi-assets-basic (npm)

MAL-2026-3906

Malicious code in @antv/f6-ui (npm)

MAL-2026-3922

Malicious code in @antv/g-lottie-player (npm)

MAL-2026-4123

Malicious code in @lint-md/cli (npm)