Supply Chain Incidents

MAL-2026-3906

Malicious code in @antv/f6-ui (npm)

MAL-2026-4149

Malicious code in onfire.js (npm)

MAL-2026-3995

Malicious code in @antv/g6-react-node (npm)

MAL-2026-3927

Malicious code in @antv/g-mobile-svg (npm)

MAL-2026-3972

Malicious code in @antv/g-webgpu-unitchart (npm)

MAL-2026-4089

Malicious code in @antv/thumbnails-component (npm)

MAL-2026-3917

Malicious code in @antv/g-device-api (npm)

MAL-2026-3848

Malicious code in @antv/a8 (npm)

MAL-2026-4097

Malicious code in @antv/wx-f2 (npm)

MAL-2026-3963

Malicious code in @antv/g-web-animations-api (npm)

MAL-2026-3950

Malicious code in @antv/g-plugin-physx (npm)

MAL-2026-3911

Malicious code in @antv/g-canvas (npm)

MAL-2026-3871

Malicious code in @antv/dipper-hooks (npm)

MAL-2026-4152

Malicious code in ribbon.js (npm)

MAL-2026-3960

Malicious code in @antv/g-plugin-zdog-svg-renderer (npm)

MAL-2026-3965

Malicious code in @antv/g-webgl (npm)

MAL-2026-4128

Malicious code in ast-plugin (npm)

MAL-2026-4143

Malicious code in limit-size (npm)

MAL-2026-4037

Malicious code in @antv/l7-district (npm)

MAL-2026-4060

Malicious code in @antv/li-analysis-assets (npm)

MAL-2026-3949

Malicious code in @antv/g-plugin-mobile-interaction (npm)

MAL-2026-4040

Malicious code in @antv/l7-extension-g-layer (npm)

MAL-2026-3952

Malicious code in @antv/g-plugin-rough-svg-renderer (npm)

MAL-2026-4030

Malicious code in @antv/interaction (npm)