Supply Chain Incidents

MAL-2026-4161

Malicious code in @cap-js/openapi (npm)

MAL-2026-3847

Malicious code in openclaw-cn (npm)

MAL-2026-3845

Malicious code in @starmind/collector-cli (npm)

MAL-2026-3842

Malicious code in @openclaw-cn/feishu (npm)

MAL-2026-3843

Malicious code in @openclaw-cn/libsignal (npm)

MAL-2026-3844

Malicious code in @openclaw-cn/toutiao-ops (npm)

MAL-2026-4179

Malicious code in vfat-tools (npm)

MAL-2026-4178

Malicious code in sickle-wrapper (npm)

MAL-2026-4148

Malicious code in miz (npm)

MAL-2026-3878

Malicious code in @antv/dw-util (npm)

MAL-2026-3976

Malicious code in @antv/g2-extension-ava (npm)

MAL-2026-3977

Malicious code in @antv/g2-extension-plot (npm)

MAL-2026-3944

Malicious code in @antv/g-plugin-gesture (npm)

MAL-2026-3875

Malicious code in @antv/dw-analyzer (npm)

MAL-2026-4080

Malicious code in @antv/s2-ssr (npm)

MAL-2026-4117

Malicious code in @antv/x6-vue3-shape (npm)

MAL-2026-4052

Malicious code in @antv/l7-three (npm)

MAL-2026-3861

Malicious code in @antv/color-schema (npm)

MAL-2026-3906

Malicious code in @antv/f6-ui (npm)

MAL-2026-4010

Malicious code in @antv/gi-assets-xlab (npm)

MAL-2026-3983

Malicious code in @antv/g6-alipay (npm)

MAL-2026-4029

Malicious code in @antv/insight-component (npm)

MAL-2026-4098

Malicious code in @antv/x6-angular-shape (npm)

MAL-2026-3896

Malicious code in @antv/f2-site (npm)