Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/torch (npm) GHSA-9v7r-m78g-4h7h, MAL-2026-4090 | Malicious | Not scored | 19 May, 2026 | npm @antv/torch |
Malicious release: Malicious code in @antv/gi-assets-advance (npm) GHSA-c27c-w76m-gf2p, MAL-2026-3838 | Malicious | Not scored | 19 May, 2026 | npm @antv/gi-assets-advance |
Malicious release: Malicious code in @antv/sam (npm) GHSA-c5qg-r8vm-7gmg, MAL-2026-4082 | Malicious | Not scored | 19 May, 2026 | npm @antv/sam |
Malicious release: Malicious code in @antv/lite-insight (npm) GHSA-c7xw-92px-fqv4, MAL-2026-4066 | Malicious | Not scored | 19 May, 2026 | npm @antv/lite-insight |
Malicious release: Malicious code in @antv/s2-vue (npm) GHSA-c8j6-ff6q-c33q, MAL-2026-4081 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2-vue |
Malicious release: Malicious code in @antv/f6 (npm) GHSA-cf4f-2vr4-h94c, MAL-2026-3900 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6 |
Malicious release: Malicious code in ribbon.js (npm) GHSA-ch5p-4w63-mwh3, MAL-2026-4152 | Malicious | Not scored | 19 May, 2026 | npm ribbon.js |
Malicious release: Malicious code in @antv/l7-react (npm) GHSA-ch8q-g7g3-ch2c, MAL-2026-4048 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-react |
Malicious release: Malicious code in @antv/s2-ssr (npm) GHSA-crqm-p6c4-53j3, MAL-2026-4080 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2-ssr |
Malicious release: Malicious code in @antv/g2-extension-plot (npm) GHSA-crxm-ppc5-4ww6, MAL-2026-3977 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-extension-plot |
Malicious release: Malicious code in @antv/g-plugin-device-renderer (npm) GHSA-cvhv-hgfw-gpjw, MAL-2026-3941 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-device-renderer |
Malicious release: Malicious code in @antv/larkmap (npm) GHSA-cvq7-2845-w4f8, MAL-2026-4056 | Malicious | Not scored | 19 May, 2026 | npm @antv/larkmap |
Malicious release: Malicious code in lint-md (npm) GHSA-f2mw-w6h4-mfxr, MAL-2026-4144 | Malicious | Not scored | 19 May, 2026 | npm lint-md |
Malicious release: Malicious code in @antv/dumi-theme-antv (npm) GHSA-f5cv-h987-mvvf, MAL-2026-3874 | Malicious | Not scored | 19 May, 2026 | npm @antv/dumi-theme-antv |
Malicious release: Malicious code in @antv/wx-f2 (npm) GHSA-f644-w9m7-3226, MAL-2026-4097 | Malicious | Not scored | 19 May, 2026 | npm @antv/wx-f2 |
Malicious release: Malicious code in @antv/insight-component (npm) GHSA-f6cp-7jc5-9mh2, MAL-2026-4029 | Malicious | Not scored | 19 May, 2026 | npm @antv/insight-component |
Malicious release: Malicious code in @antv/g-plugin-image-loader (npm) GHSA-f9q2-9cqp-m7vg, MAL-2026-3947 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-image-loader |
Malicious release: Malicious code in @antv/dw-random (npm) GHSA-fcmx-cpgr-h8vw, MAL-2026-3876 | Malicious | Not scored | 19 May, 2026 | npm @antv/dw-random |
Malicious release: Malicious code in @antv/f6-plugin (npm) GHSA-ff45-9m3q-68c3, MAL-2026-3905 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-plugin |
Malicious release: Malicious code in @antv/x6-plugin-keyboard (npm) GHSA-fgrc-mhgc-p54c, MAL-2026-4105 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-keyboard |
Malicious release: Malicious code in @antv/g-base (npm) GHSA-fj47-69vv-4wrg, MAL-2026-3909 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-base |
Malicious release: Malicious code in @antv/f2 (npm) GHSA-frf4-vfhp-v4mp, MAL-2026-3889 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2 |
Malicious release: Malicious code in @antv/util (npm) GHSA-fv4v-94w8-3wxw, MAL-2026-4092 | Malicious | Not scored | 19 May, 2026 | npm @antv/util |
Malicious release: Malicious code in relationship.js (npm) GHSA-g4xx-h8m2-8v25, MAL-2026-4151 | Malicious | Not scored | 19 May, 2026 | npm relationship.js |
Malicious release: Malicious code in @antv/l7-leaflet (npm) GHSA-g573-r685-2wfw, MAL-2026-4042 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-leaflet |
Malicious release: Malicious code in @antv/g-svg (npm) GHSA-gmjx-qvrf-vhv6, MAL-2026-3962 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-svg |
Malicious release: Malicious code in @antv/g6-pc (npm) GHSA-gv7r-wxq8-vf2h, MAL-2026-3991 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-pc |
Malicious release: Malicious code in @antv/translator (npm) GHSA-gvh3-8wx2-39pc, MAL-2026-4091 | Malicious | Not scored | 19 May, 2026 | npm @antv/translator |
Malicious release: Malicious code in jest-date-mock (npm) GHSA-gwg9-3m44-qhfx, MAL-2026-4137 | Malicious | Not scored | 19 May, 2026 | npm jest-date-mock |
Malicious release: Malicious code in @antv/geo-coord (npm) GHSA-gwp4-2x9w-m2rp, MAL-2026-3999 | Malicious | Not scored | 19 May, 2026 | npm @antv/geo-coord |
Malicious release: Malicious code in size-sensor (npm) GHSA-gx6x-v325-85g4, MAL-2026-4153 | Malicious | Not scored | 19 May, 2026 | npm size-sensor |
Malicious release: Malicious code in @antv/t8 (npm) GHSA-gxcf-rxf9-xh9w, MAL-2026-4087 | Malicious | Not scored | 19 May, 2026 | npm @antv/t8 |
Malicious release: Malicious code in @antv/infographic (npm) GHSA-h2vx-m6jw-m3fh, MAL-2026-4028 | Malicious | Not scored | 19 May, 2026 | npm @antv/infographic |
Malicious release: Malicious code in @antv/gpt-vis (npm) GHSA-h532-5hjv-hxj7, MAL-2026-4020 | Malicious | Not scored | 19 May, 2026 | npm @antv/gpt-vis |
Malicious release: Malicious code in @antv/f-engine (npm) GHSA-h5pg-jgfc-7p29, MAL-2026-3882 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-engine |
Malicious release: Malicious code in @antv/graphin-components (npm) GHSA-h6cj-pm97-h3xr, MAL-2026-4023 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphin-components |
Malicious release: Malicious code in @antv/f6-ui (npm) GHSA-h7rm-c8rv-7pmh, MAL-2026-3906 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-ui |
Malicious release: Malicious code in @antv/g6 (npm) GHSA-h97c-gr6h-22jm, MAL-2026-3982 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6 |
Malicious release: Malicious code in @antv/f2-vue (npm) GHSA-h99h-cqwg-x93c, MAL-2026-3897 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-vue |
Malicious release: Malicious code in uri-parse (npm) GHSA-hfw8-4wqw-c5vc, MAL-2026-4157 | Malicious | Not scored | 19 May, 2026 | npm uri-parse |
Malicious release: Malicious code in @antv/l7-composite-layers (npm) GHSA-hm78-c92r-2fxj, MAL-2026-4035 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-composite-layers |
Malicious release: Malicious code in @antv/g2 (npm) GHSA-hqrw-phww-294v, MAL-2026-3973 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2 |
Malicious release: Malicious code in @antv/g-plugin-html-renderer (npm) GHSA-hr4w-2pm9-xxw5, MAL-2026-3946 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-html-renderer |
Malicious release: Malicious code in @antv/g-webgpu-core (npm) GHSA-hv4f-2hmr-6gm3, MAL-2026-3969 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgpu-core |
Malicious release: Malicious code in @antv/xflow (npm) GHSA-hw5x-qjf4-4rw9, MAL-2026-4118 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow |
Malicious release: Malicious code in @antv/g-plugin-control (npm) GHSA-j4m6-2q6x-558x, MAL-2026-3939 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-control |
Malicious release: Malicious code in jest-expect (npm) GHSA-jc3x-p9g4-wph8, MAL-2026-4139 | Malicious | Not scored | 19 May, 2026 | npm jest-expect |
Malicious release: Malicious code in @antv/f-test-utils (npm) GHSA-jc7g-fj7v-rj9q, MAL-2026-3886 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-test-utils |
Malicious release: Malicious code in @antv/istanbul (npm) GHSA-jcmr-46p2-74wf, MAL-2026-4031 | Malicious | Not scored | 19 May, 2026 | npm @antv/istanbul |
Malicious release: Malicious code in @antv/g-lottie-player (npm) GHSA-jf5g-vg6h-fj8m, MAL-2026-3922 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-lottie-player |