Supply Chain Incidents

MAL-2026-3864

Malicious code in @antv/coord (npm)

MAL-2026-3920

Malicious code in @antv/g-layout-blocklike (npm)

MAL-2026-4130

Malicious code in boring-avatars-vanilla (npm)

MAL-2026-3932

Malicious code in @antv/g-plugin-a11y (npm)

MAL-2026-3968

Malicious code in @antv/g-webgpu-compiler (npm)

MAL-2026-4073

Malicious code in @antv/narrative-text-schema (npm)

MAL-2026-4065

Malicious code in @antv/li-sdk (npm)

MAL-2026-3908

Malicious code in @antv/g (npm)

MAL-2026-3889

Malicious code in @antv/f2 (npm)

MAL-2026-4070

Malicious code in @antv/my-f2 (npm)

MAL-2026-3997

Malicious code in @antv/g6-wx (npm)

MAL-2026-3924

Malicious code in @antv/g-mobile (npm)

MAL-2026-4029

Malicious code in @antv/insight-component (npm)

MAL-2026-3937

Malicious code in @antv/g-plugin-canvas-renderer (npm)

MAL-2026-3905

Malicious code in @antv/f6-plugin (npm)

MAL-2026-4154

Malicious code in slice.js (npm)

MAL-2026-4117

Malicious code in @antv/x6-vue3-shape (npm)

MAL-2026-3855

Malicious code in @antv/awards (npm)

MAL-2026-4151

Malicious code in relationship.js (npm)

MAL-2026-3970

Malicious code in @antv/g-webgpu-engine (npm)

MAL-2026-3883

Malicious code in @antv/f-lottie (npm)

MAL-2026-3982

Malicious code in @antv/g6 (npm)

MAL-2026-3880

Malicious code in @antv/expr (npm)

MAL-2026-3869

Malicious code in @antv/data-wizard (npm)