Supply Chain Incidents

MAL-2026-3848

Malicious code in @antv/a8 (npm)

MAL-2026-4122

Malicious code in @antv/xflow-hook (npm)

MAL-2026-3846

Malicious code in byte-parser (npm)

MAL-2026-4107

Malicious code in @antv/x6-plugin-scroller (npm)

MAL-2026-4143

Malicious code in limit-size (npm)

MAL-2026-3994

Malicious code in @antv/g6-plugins (npm)

MAL-2026-3973

Malicious code in @antv/g2 (npm)

MAL-2026-3870

Malicious code in @antv/dipper-component (npm)

MAL-2026-4075

Malicious code in @antv/path-util (npm)

MAL-2026-3887

Malicious code in @antv/f-vue (npm)

MAL-2026-3964

Malicious code in @antv/g-web-components (npm)

MAL-2026-4058

Malicious code in @antv/layout-wasm (npm)

MAL-2026-4109

Malicious code in @antv/x6-plugin-snapline (npm)

MAL-2026-4097

Malicious code in @antv/wx-f2 (npm)

MAL-2026-3947

Malicious code in @antv/g-plugin-image-loader (npm)

MAL-2026-4094

Malicious code in @antv/vis-predict-engine (npm)

MAL-2026-3931

Malicious code in @antv/g-plugin-3d (npm)

MAL-2026-4125

Malicious code in @lint-md/parser (npm)

MAL-2026-3892

Malicious code in @antv/f2-context (npm)

MAL-2026-3959

Malicious code in @antv/g-plugin-zdog-canvas-renderer (npm)

MAL-2026-4126

Malicious code in ai-figure (npm)

MAL-2026-4059

Malicious code in @antv/li-aiearth-assets (npm)

MAL-2026-3910

Malicious code in @antv/g-camera-api (npm)

MAL-2026-4048

Malicious code in @antv/l7-react (npm)