Supply Chain Incidents

MAL-2026-3919

Malicious code in @antv/g-gesture (npm)

MAL-2026-4053

Malicious code in @antv/l7-utils (npm)

MAL-2026-4048

Malicious code in @antv/l7-react (npm)

MAL-2026-3976

Malicious code in @antv/g2-extension-ava (npm)

MAL-2026-3966

Malicious code in @antv/g-webgl-compute (npm)

MAL-2026-4137

Malicious code in jest-date-mock (npm)

MAL-2026-3988

Malicious code in @antv/g6-extension-3d (npm)

MAL-2026-4119

Malicious code in @antv/xflow-core (npm)

MAL-2026-4018

Malicious code in @antv/github-config-cli (npm)

MAL-2026-4144

Malicious code in lint-md (npm)

MAL-2026-4085

Malicious code in @antv/smart-color (npm)

MAL-2026-3851

Malicious code in @antv/async-hook (npm)

MAL-2026-4006

Malicious code in @antv/gi-assets-neo4j (npm)

MAL-2026-3839

Malicious code in @antv/x6 (npm)

MAL-2026-3944

Malicious code in @antv/g-plugin-gesture (npm)

MAL-2026-4132

Malicious code in echarts-for-react (npm)

MAL-2026-3954

Malicious code in @antv/g-plugin-svg-renderer (npm)

MAL-2026-4019

Malicious code in @antv/gl-matrix (npm)

MAL-2026-3853

Malicious code in @antv/ava (npm)

MAL-2026-3867

Malicious code in @antv/data-samples (npm)

MAL-2026-3992

Malicious code in @antv/g6-plugin (npm)

MAL-2026-4058

Malicious code in @antv/layout-wasm (npm)

MAL-2026-4050

Malicious code in @antv/l7-scene (npm)

MAL-2026-4051

Malicious code in @antv/l7-source (npm)