Supply Chain Incidents

MAL-2026-4010

Malicious code in @antv/gi-assets-xlab (npm)

MAL-2026-3874

Malicious code in @antv/dumi-theme-antv (npm)

MAL-2026-4084

Malicious code in @antv/semantic-release-pnpm (npm)

MAL-2026-3890

Malicious code in @antv/f2-algorithm (npm)

MAL-2026-3895

Malicious code in @antv/f2-react (npm)

MAL-2026-3926

Malicious code in @antv/g-mobile-canvas-element (npm)

MAL-2026-4025

Malicious code in @antv/graphin-icons (npm)

MAL-2026-4020

Malicious code in @antv/gpt-vis (npm)

MAL-2026-3840

Malicious code in @antv/x6-geometry (npm)

MAL-2026-4032

Malicious code in @antv/knowledge (npm)

MAL-2026-4077

Malicious code in @antv/s2 (npm)

MAL-2026-3928

Malicious code in @antv/g-mobile-webgl (npm)

MAL-2026-3918

Malicious code in @antv/g-dom-mutation-observer-api (npm)

MAL-2026-4141

Malicious code in jest-random-mock (npm)

MAL-2026-3881

Malicious code in @antv/f-charts (npm)

MAL-2026-4088

Malicious code in @antv/thumbnails (npm)

MAL-2026-3986

Malicious code in @antv/g6-editor (npm)

MAL-2026-3959

Malicious code in @antv/g-plugin-zdog-canvas-renderer (npm)

MAL-2026-4024

Malicious code in @antv/graphin-graphscope (npm)

MAL-2026-4134

Malicious code in fixed-round (npm)

MAL-2026-3854

Malicious code in @antv/ava-react (npm)

MAL-2026-4022

Malicious code in @antv/graphin (npm)

MAL-2026-4078

Malicious code in @antv/s2-react (npm)

MAL-2026-4038

Malicious code in @antv/l7-draw (npm)