Supply Chain Incidents

MAL-2026-3870

Malicious code in @antv/dipper-component (npm)

MAL-2026-3951

Malicious code in @antv/g-plugin-rough-canvas-renderer (npm)

MAL-2026-3862

Malicious code in @antv/color-util (npm)

MAL-2026-3856

Malicious code in @antv/calendar-heatmap (npm)

MAL-2026-4121

Malicious code in @antv/xflow-extension (npm)

MAL-2026-4001

Malicious code in @antv/gi-assets-basic (npm)

MAL-2026-3906

Malicious code in @antv/f6-ui (npm)

MAL-2026-4089

Malicious code in @antv/thumbnails-component (npm)

MAL-2026-4081

Malicious code in @antv/s2-vue (npm)

MAL-2026-4123

Malicious code in @lint-md/cli (npm)

MAL-2026-4142

Malicious code in jest-url-loader (npm)

MAL-2026-4129

Malicious code in babel-plugin-version (npm)

MAL-2026-3922

Malicious code in @antv/g-lottie-player (npm)

MAL-2026-3848

Malicious code in @antv/a8 (npm)

MAL-2026-4152

Malicious code in ribbon.js (npm)

MAL-2026-4030

Malicious code in @antv/interaction (npm)

MAL-2026-4149

Malicious code in onfire.js (npm)

MAL-2026-3917

Malicious code in @antv/g-device-api (npm)

MAL-2026-3963

Malicious code in @antv/g-web-animations-api (npm)

MAL-2026-4128

Malicious code in ast-plugin (npm)

MAL-2026-3995

Malicious code in @antv/g6-react-node (npm)

MAL-2026-3950

Malicious code in @antv/g-plugin-physx (npm)

MAL-2026-3911

Malicious code in @antv/g-canvas (npm)

MAL-2026-4097

Malicious code in @antv/wx-f2 (npm)