Supply Chain Incidents

MAL-2026-4109

Malicious code in @antv/x6-plugin-snapline (npm)

MAL-2026-3921

Malicious code in @antv/g-lite (npm)

MAL-2026-4047

Malicious code in @antv/l7-pass (npm)

MAL-2026-3943

Malicious code in @antv/g-plugin-dragndrop (npm)

MAL-2026-3899

Malicious code in @antv/f2-wx (npm)

MAL-2026-3989

Malicious code in @antv/g6-extension-react (npm)

MAL-2026-4007

Malicious code in @antv/gi-assets-scene (npm)

MAL-2026-3831

Malicious code in citrea-utils (npm)

MAL-2026-3830

Malicious code in @zentrafinance/contracts (npm)

MAL-2026-3833

Malicious code in zentra-sdk (npm)

MAL-2026-3832

Malicious code in zentra-finance (npm)

MAL-2026-3836

Malicious code in ctf-flare (npm)

MAL-2026-3825

Malicious code in safe-env-reader (npm)

MAL-2026-3823

Malicious code in parse-escape-regex-string (npm)

MAL-2026-3827

Malicious code in string-manipulation-typescript (npm)

MAL-2026-3828

Malicious code in validate-api-key (npm)

MAL-2026-3826

Malicious code in secure-env-loader (npm)

MAL-2026-3824

Malicious code in parse-regex-string (npm)

MAL-2026-3812

Malicious code in @easytipsportal/node-helper (npm)

MAL-2026-3811

Malicious code in claude-code-base-action (npm)

MAL-2026-3810

Malicious code in @pluxee-connect/account-db-api-client (npm)

MAL-2026-3822

Malicious code in clementine-sdk (npm)

MAL-2026-3813

Malicious code in @zentrafinance/protocol-config (npm)

MAL-2026-3821

Malicious code in citrea-sdk (npm)