Supply Chain Incidents

MAL-2026-4058

Malicious code in @antv/layout-wasm (npm)

MAL-2026-4044

Malicious code in @antv/l7-mapkit (npm)

MAL-2026-3978

Malicious code in @antv/g2-plugin-slider (npm)

MAL-2026-4048

Malicious code in @antv/l7-react (npm)

MAL-2026-4146

Malicious code in mcp-echarts (npm)

MAL-2026-3913

Malicious code in @antv/g-compat (npm)

MAL-2026-4136

Malicious code in jest-canvas-mock (npm)

MAL-2026-4150

Malicious code in react-adsense (npm)

MAL-2026-3945

Malicious code in @antv/g-plugin-gpgpu (npm)

MAL-2026-4012

Malicious code in @antv/gi-common-components (npm)

MAL-2026-4155

Malicious code in timeago-react (npm)

MAL-2026-4064

Malicious code in @antv/li-sam-assets (npm)

MAL-2026-4023

Malicious code in @antv/graphin-components (npm)

MAL-2026-3877

Malicious code in @antv/dw-transform (npm)

MAL-2026-4103

Malicious code in @antv/x6-plugin-export (npm)

MAL-2026-4075

Malicious code in @antv/path-util (npm)

MAL-2026-3958

Malicious code in @antv/g-plugin-yoga (npm)

MAL-2026-4045

Malicious code in @antv/l7-maps (npm)

MAL-2026-3936

Malicious code in @antv/g-plugin-canvas-picker (npm)

MAL-2026-4135

Malicious code in gantt-for-react (npm)

MAL-2026-3903

Malicious code in @antv/f6-element (npm)

MAL-2026-4068

Malicious code in @antv/mcp-server-antv (npm)

MAL-2026-3887

Malicious code in @antv/f-vue (npm)

MAL-2026-4011

Malicious code in @antv/gi-cli (npm)