Supply Chain Incidents

MAL-2026-3842

Malicious code in @openclaw-cn/feishu (npm)

MAL-2026-3845

Malicious code in @starmind/collector-cli (npm)

MAL-2026-4179

Malicious code in vfat-tools (npm)

MAL-2026-4178

Malicious code in sickle-wrapper (npm)

MAL-2026-4131

Malicious code in canvas-nest.js (npm)

MAL-2026-3925

Malicious code in @antv/g-mobile-canvas (npm)

MAL-2026-3899

Malicious code in @antv/f2-wx (npm)

MAL-2026-4007

Malicious code in @antv/gi-assets-scene (npm)

MAL-2026-4109

Malicious code in @antv/x6-plugin-snapline (npm)

MAL-2026-3878

Malicious code in @antv/dw-util (npm)

MAL-2026-4054

Malicious code in @antv/l7plot (npm)

MAL-2026-3909

Malicious code in @antv/g-base (npm)

MAL-2026-4142

Malicious code in jest-url-loader (npm)

MAL-2026-4122

Malicious code in @antv/xflow-hook (npm)

MAL-2026-4066

Malicious code in @antv/lite-insight (npm)

MAL-2026-4121

Malicious code in @antv/xflow-extension (npm)

MAL-2026-3891

Malicious code in @antv/f2-canvas (npm)

MAL-2026-3904

Malicious code in @antv/f6-hammerjs (npm)

MAL-2026-3870

Malicious code in @antv/dipper-component (npm)

MAL-2026-3862

Malicious code in @antv/color-util (npm)

MAL-2026-3951

Malicious code in @antv/g-plugin-rough-canvas-renderer (npm)

MAL-2026-4101

Malicious code in @antv/x6-plugin-clipboard (npm)

MAL-2026-3927

Malicious code in @antv/g-mobile-svg (npm)

MAL-2026-3856

Malicious code in @antv/calendar-heatmap (npm)