Supply Chain Incidents

MAL-2026-4002

Malicious code in @antv/gi-assets-galaxybase (npm)

MAL-2026-3962

Malicious code in @antv/g-svg (npm)

MAL-2026-4088

Malicious code in @antv/thumbnails (npm)

MAL-2026-3941

Malicious code in @antv/g-plugin-device-renderer (npm)

MAL-2026-4076

Malicious code in @antv/react-g (npm)

MAL-2026-4052

Malicious code in @antv/l7-three (npm)

MAL-2026-3931

Malicious code in @antv/g-plugin-3d (npm)

MAL-2026-3910

Malicious code in @antv/g-camera-api (npm)

MAL-2026-3981

Malicious code in @antv/g2plot-schemas (npm)

MAL-2026-3946

Malicious code in @antv/g-plugin-html-renderer (npm)

MAL-2026-3942

Malicious code in @antv/g-plugin-dom-interaction (npm)

MAL-2026-4126

Malicious code in ai-figure (npm)

MAL-2026-4124

Malicious code in @lint-md/core (npm)

MAL-2026-4016

Malicious code in @antv/gi-sdk-app (npm)

MAL-2026-3985

Malicious code in @antv/g6-core (npm)

MAL-2026-3948

Malicious code in @antv/g-plugin-matterjs (npm)

MAL-2026-4159

Malicious code in xmorse (npm)

MAL-2026-3974

Malicious code in @antv/g2-brush (npm)

MAL-2026-3984

Malicious code in @antv/g6-cli (npm)

MAL-2026-4099

Malicious code in @antv/x6-common (npm)

MAL-2026-4156

Malicious code in timeago.js (npm)

MAL-2026-4114

Malicious code in @antv/x6-react-shape (npm)

MAL-2026-4091

Malicious code in @antv/translator (npm)

MAL-2026-3980

Malicious code in @antv/g2plot (npm)