Supply Chain Incidents

MAL-2026-3917

Malicious code in @antv/g-device-api (npm)

MAL-2026-4037

Malicious code in @antv/l7-district (npm)

MAL-2026-4126

Malicious code in ai-figure (npm)

MAL-2026-3896

Malicious code in @antv/f2-site (npm)

MAL-2026-3960

Malicious code in @antv/g-plugin-zdog-svg-renderer (npm)

MAL-2026-3926

Malicious code in @antv/g-mobile-canvas-element (npm)

MAL-2026-4151

Malicious code in relationship.js (npm)

MAL-2026-3895

Malicious code in @antv/f2-react (npm)

MAL-2026-4102

Malicious code in @antv/x6-plugin-dnd (npm)

MAL-2026-3932

Malicious code in @antv/g-plugin-a11y (npm)

MAL-2026-3984

Malicious code in @antv/g6-cli (npm)

MAL-2026-3854

Malicious code in @antv/ava-react (npm)

MAL-2026-4098

Malicious code in @antv/x6-angular-shape (npm)

MAL-2026-4143

Malicious code in limit-size (npm)

MAL-2026-3975

Malicious code in @antv/g2-extension-3d (npm)

MAL-2026-3980

Malicious code in @antv/g2plot (npm)

MAL-2026-4149

Malicious code in onfire.js (npm)

MAL-2026-4047

Malicious code in @antv/l7-pass (npm)

MAL-2026-4022

Malicious code in @antv/graphin (npm)

MAL-2026-3919

Malicious code in @antv/g-gesture (npm)

MAL-2026-3989

Malicious code in @antv/g6-extension-react (npm)

MAL-2026-3899

Malicious code in @antv/f2-wx (npm)

MAL-2026-3871

Malicious code in @antv/dipper-hooks (npm)

MAL-2026-3925

Malicious code in @antv/g-mobile-canvas (npm)