Supply Chain Incidents

MAL-2026-3887

Malicious code in @antv/f-vue (npm)

MAL-2026-4033

Malicious code in @antv/l7 (npm)

MAL-2026-4068

Malicious code in @antv/mcp-server-antv (npm)

MAL-2026-4135

Malicious code in gantt-for-react (npm)

MAL-2026-3859

Malicious code in @antv/chart-visualization-skills (npm)

MAL-2026-3936

Malicious code in @antv/g-plugin-canvas-picker (npm)

MAL-2026-4075

Malicious code in @antv/path-util (npm)

MAL-2026-4023

Malicious code in @antv/graphin-components (npm)

MAL-2026-4103

Malicious code in @antv/x6-plugin-export (npm)

MAL-2026-3835

Malicious code in solana-web3-alt (PyPI)

MAL-2026-3834

Malicious code in foundry-utils (PyPI)

MAL-2026-3831

Malicious code in citrea-utils (npm)

MAL-2026-3830

Malicious code in @zentrafinance/contracts (npm)

MAL-2026-3833

Malicious code in zentra-sdk (npm)

MAL-2026-3832

Malicious code in zentra-finance (npm)

MAL-2026-3836

Malicious code in ctf-flare (npm)

MAL-2026-3829

Malicious code in pyenvprep (PyPI)

MAL-2026-3825

Malicious code in safe-env-reader (npm)

MAL-2026-3826

Malicious code in secure-env-loader (npm)

MAL-2026-3823

Malicious code in parse-escape-regex-string (npm)

MAL-2026-3828

Malicious code in validate-api-key (npm)

MAL-2026-3827

Malicious code in string-manipulation-typescript (npm)

MAL-2026-3824

Malicious code in parse-regex-string (npm)

MAL-2026-3812

Malicious code in @easytipsportal/node-helper (npm)