Supply Chain Incidents

MAL-2026-4057

Malicious code in @antv/layout-gpu (npm)

MAL-2026-3956

Malicious code in @antv/g-plugin-webgl-renderer (npm)

MAL-2026-3933

Malicious code in @antv/g-plugin-annotation (npm)

MAL-2026-4007

Malicious code in @antv/gi-assets-scene (npm)

MAL-2026-3893

Malicious code in @antv/f2-graphic (npm)

MAL-2026-4089

Malicious code in @antv/thumbnails-component (npm)

MAL-2026-4117

Malicious code in @antv/x6-vue3-shape (npm)

MAL-2026-3849

Malicious code in @antv/adjust (npm)

MAL-2026-3922

Malicious code in @antv/g-lottie-player (npm)

MAL-2026-4121

Malicious code in @antv/xflow-extension (npm)

MAL-2026-3999

Malicious code in @antv/geo-coord (npm)

MAL-2026-3856

Malicious code in @antv/calendar-heatmap (npm)

MAL-2026-4134

Malicious code in fixed-round (npm)

MAL-2026-3927

Malicious code in @antv/g-mobile-svg (npm)

MAL-2026-4095

Malicious code in @antv/webgpu-graph (npm)

MAL-2026-3897

Malicious code in @antv/f2-vue (npm)

MAL-2026-4034

Malicious code in @antv/l7-component (npm)

MAL-2026-4047

Malicious code in @antv/l7-pass (npm)

MAL-2026-3876

Malicious code in @antv/dw-random (npm)

MAL-2026-4100

Malicious code in @antv/x6-components (npm)

MAL-2026-4054

Malicious code in @antv/l7plot (npm)

MAL-2026-3909

Malicious code in @antv/g-base (npm)

MAL-2026-4153

Malicious code in size-sensor (npm)

MAL-2026-3997

Malicious code in @antv/g6-wx (npm)