# Vulnerabilities published in 2026 - [MAL-2026-4062](https://insights.sbomify.com/MAL-2026-4062/): Malicious code in @antv/li-editor (npm) (malicious package) - [MAL-2026-4061](https://insights.sbomify.com/MAL-2026-4061/): Malicious code in @antv/li-core-assets (npm) (malicious package) - [MAL-2026-4060](https://insights.sbomify.com/MAL-2026-4060/): Malicious code in @antv/li-analysis-assets (npm) (malicious package) - [MAL-2026-406](https://insights.sbomify.com/MAL-2026-406/): Malicious code in aws-crt-nodejs (npm) (malicious package) - [MAL-2026-4059](https://insights.sbomify.com/MAL-2026-4059/): Malicious code in @antv/li-aiearth-assets (npm) (malicious package) - [MAL-2026-4058](https://insights.sbomify.com/MAL-2026-4058/): Malicious code in @antv/layout-wasm (npm) (malicious package) - [MAL-2026-4057](https://insights.sbomify.com/MAL-2026-4057/): Malicious code in @antv/layout-gpu (npm) (malicious package) - [MAL-2026-4056](https://insights.sbomify.com/MAL-2026-4056/): Malicious code in @antv/larkmap (npm) (malicious package) - [MAL-2026-4055](https://insights.sbomify.com/MAL-2026-4055/): Malicious code in @antv/l7plot-component (npm) (malicious package) - [MAL-2026-4054](https://insights.sbomify.com/MAL-2026-4054/): Malicious code in @antv/l7plot (npm) (malicious package) - [MAL-2026-4053](https://insights.sbomify.com/MAL-2026-4053/): Malicious code in @antv/l7-utils (npm) (malicious package) - [MAL-2026-4052](https://insights.sbomify.com/MAL-2026-4052/): Malicious code in @antv/l7-three (npm) (malicious package) - [MAL-2026-4051](https://insights.sbomify.com/MAL-2026-4051/): Malicious code in @antv/l7-source (npm) (malicious package) - [MAL-2026-4050](https://insights.sbomify.com/MAL-2026-4050/): Malicious code in @antv/l7-scene (npm) (malicious package) - [MAL-2026-405](https://insights.sbomify.com/MAL-2026-405/): Malicious code in anthropic-sdk (npm) (malicious package) - [MAL-2026-4049](https://insights.sbomify.com/MAL-2026-4049/): Malicious code in @antv/l7-renderer (npm) (malicious package) - [MAL-2026-4048](https://insights.sbomify.com/MAL-2026-4048/): Malicious code in @antv/l7-react (npm) (malicious package) - [MAL-2026-4047](https://insights.sbomify.com/MAL-2026-4047/): Malicious code in @antv/l7-pass (npm) (malicious package) - [MAL-2026-4046](https://insights.sbomify.com/MAL-2026-4046/): Malicious code in @antv/l7-mini (npm) (malicious package) - [MAL-2026-4045](https://insights.sbomify.com/MAL-2026-4045/): Malicious code in @antv/l7-maps (npm) (malicious package) - [MAL-2026-4044](https://insights.sbomify.com/MAL-2026-4044/): Malicious code in @antv/l7-mapkit (npm) (malicious package) - [MAL-2026-4043](https://insights.sbomify.com/MAL-2026-4043/): Malicious code in @antv/l7-map (npm) (malicious package) - [MAL-2026-4042](https://insights.sbomify.com/MAL-2026-4042/): Malicious code in @antv/l7-leaflet (npm) (malicious package) - [MAL-2026-4041](https://insights.sbomify.com/MAL-2026-4041/): Malicious code in @antv/l7-layers (npm) (malicious package) - [MAL-2026-4040](https://insights.sbomify.com/MAL-2026-4040/): Malicious code in @antv/l7-extension-g-layer (npm) (malicious package) - [MAL-2026-404](https://insights.sbomify.com/MAL-2026-404/): Malicious code in worldposition (npm) (malicious package) - [MAL-2026-4039](https://insights.sbomify.com/MAL-2026-4039/): Malicious code in @antv/l7-editor (npm) (malicious package) - [MAL-2026-4038](https://insights.sbomify.com/MAL-2026-4038/): Malicious code in @antv/l7-draw (npm) (malicious package) - [MAL-2026-4037](https://insights.sbomify.com/MAL-2026-4037/): Malicious code in @antv/l7-district (npm) (malicious package) - [MAL-2026-4036](https://insights.sbomify.com/MAL-2026-4036/): Malicious code in @antv/l7-core (npm) (malicious package) - [MAL-2026-4035](https://insights.sbomify.com/MAL-2026-4035/): Malicious code in @antv/l7-composite-layers (npm) (malicious package) - [MAL-2026-4034](https://insights.sbomify.com/MAL-2026-4034/): Malicious code in @antv/l7-component (npm) (malicious package) - [MAL-2026-4033](https://insights.sbomify.com/MAL-2026-4033/): Malicious code in @antv/l7 (npm) (malicious package) - [MAL-2026-4032](https://insights.sbomify.com/MAL-2026-4032/): Malicious code in @antv/knowledge (npm) (malicious package) - [MAL-2026-4031](https://insights.sbomify.com/MAL-2026-4031/): Malicious code in @antv/istanbul (npm) (malicious package) - [MAL-2026-4030](https://insights.sbomify.com/MAL-2026-4030/): Malicious code in @antv/interaction (npm) (malicious package) - [MAL-2026-403](https://insights.sbomify.com/MAL-2026-403/): Malicious code in worldnormal (npm) (malicious package) - [MAL-2026-4029](https://insights.sbomify.com/MAL-2026-4029/): Malicious code in @antv/insight-component (npm) (malicious package) - [MAL-2026-4028](https://insights.sbomify.com/MAL-2026-4028/): Malicious code in @antv/infographic (npm) (malicious package) - [MAL-2026-4027](https://insights.sbomify.com/MAL-2026-4027/): Malicious code in @antv/hierarchy (npm) (malicious package) - [MAL-2026-4026](https://insights.sbomify.com/MAL-2026-4026/): Malicious code in @antv/graphlib (npm) (malicious package) - [MAL-2026-4025](https://insights.sbomify.com/MAL-2026-4025/): Malicious code in @antv/graphin-icons (npm) (malicious package) - [MAL-2026-4024](https://insights.sbomify.com/MAL-2026-4024/): Malicious code in @antv/graphin-graphscope (npm) (malicious package) - [MAL-2026-4023](https://insights.sbomify.com/MAL-2026-4023/): Malicious code in @antv/graphin-components (npm) (malicious package) - [MAL-2026-4022](https://insights.sbomify.com/MAL-2026-4022/): Malicious code in @antv/graphin (npm) (malicious package) - [MAL-2026-4021](https://insights.sbomify.com/MAL-2026-4021/): Malicious code in @antv/gpt-vis-ssr (npm) (malicious package) - [MAL-2026-4020](https://insights.sbomify.com/MAL-2026-4020/): Malicious code in @antv/gpt-vis (npm) (malicious package) - [MAL-2026-402](https://insights.sbomify.com/MAL-2026-402/): Malicious code in vworldviewdir (npm) (malicious package) - [MAL-2026-4019](https://insights.sbomify.com/MAL-2026-4019/): Malicious code in @antv/gl-matrix (npm) (malicious package) - [MAL-2026-4018](https://insights.sbomify.com/MAL-2026-4018/): Malicious code in @antv/github-config-cli (npm) (malicious package) - [MAL-2026-4017](https://insights.sbomify.com/MAL-2026-4017/): Malicious code in @antv/gi-theme-antd (npm) (malicious package) - [MAL-2026-4016](https://insights.sbomify.com/MAL-2026-4016/): Malicious code in @antv/gi-sdk-app (npm) (malicious package) - [MAL-2026-4015](https://insights.sbomify.com/MAL-2026-4015/): Malicious code in @antv/gi-sdk (npm) (malicious package) - [MAL-2026-4014](https://insights.sbomify.com/MAL-2026-4014/): Malicious code in @antv/gi-public-data (npm) (malicious package) - [MAL-2026-4013](https://insights.sbomify.com/MAL-2026-4013/): Malicious code in @antv/gi-mock-data (npm) (malicious package) - [MAL-2026-4012](https://insights.sbomify.com/MAL-2026-4012/): Malicious code in @antv/gi-common-components (npm) (malicious package) - [MAL-2026-4011](https://insights.sbomify.com/MAL-2026-4011/): Malicious code in @antv/gi-cli (npm) (malicious package) - [MAL-2026-4010](https://insights.sbomify.com/MAL-2026-4010/): Malicious code in @antv/gi-assets-xlab (npm) (malicious package) - [MAL-2026-401](https://insights.sbomify.com/MAL-2026-401/): Malicious code in victim-package-c (npm) (malicious package) - [MAL-2026-4009](https://insights.sbomify.com/MAL-2026-4009/): Malicious code in @antv/gi-assets-tugraph-analytics (npm) (malicious package) - [MAL-2026-4008](https://insights.sbomify.com/MAL-2026-4008/): Malicious code in @antv/gi-assets-tugraph (npm) (malicious package) - [MAL-2026-4007](https://insights.sbomify.com/MAL-2026-4007/): Malicious code in @antv/gi-assets-scene (npm) (malicious package) - [MAL-2026-4006](https://insights.sbomify.com/MAL-2026-4006/): Malicious code in @antv/gi-assets-neo4j (npm) (malicious package) - [MAL-2026-4005](https://insights.sbomify.com/MAL-2026-4005/): Malicious code in @antv/gi-assets-janusgraph (npm) (malicious package) - [MAL-2026-4004](https://insights.sbomify.com/MAL-2026-4004/): Malicious code in @antv/gi-assets-hugegraph (npm) (malicious package) - [MAL-2026-4003](https://insights.sbomify.com/MAL-2026-4003/): Malicious code in @antv/gi-assets-graphscope (npm) (malicious package) - [MAL-2026-4002](https://insights.sbomify.com/MAL-2026-4002/): Malicious code in @antv/gi-assets-galaxybase (npm) (malicious package) - [MAL-2026-4001](https://insights.sbomify.com/MAL-2026-4001/): Malicious code in @antv/gi-assets-basic (npm) (malicious package) - [MAL-2026-4000](https://insights.sbomify.com/MAL-2026-4000/): Malicious code in @antv/gi-assets-algorithm (npm) (malicious package) - [MAL-2026-400](https://insights.sbomify.com/MAL-2026-400/): Malicious code in victim-package-b (npm) (malicious package) - [MAL-2026-40](https://insights.sbomify.com/MAL-2026-40/): Malicious code in spire.officejs-editors (npm) (malicious package) - [MAL-2026-4](https://insights.sbomify.com/MAL-2026-4/): Malicious code in rules-playground (npm) (malicious package) - [MAL-2026-3999](https://insights.sbomify.com/MAL-2026-3999/): Malicious code in @antv/geo-coord (npm) (malicious package) - [MAL-2026-3998](https://insights.sbomify.com/MAL-2026-3998/): Malicious code in @antv/gatsby-theme (npm) (malicious package) - [MAL-2026-3997](https://insights.sbomify.com/MAL-2026-3997/): Malicious code in @antv/g6-wx (npm) (malicious package) - [MAL-2026-3996](https://insights.sbomify.com/MAL-2026-3996/): Malicious code in @antv/g6-ssr (npm) (malicious package) - [MAL-2026-3995](https://insights.sbomify.com/MAL-2026-3995/): Malicious code in @antv/g6-react-node (npm) (malicious package) - [MAL-2026-3994](https://insights.sbomify.com/MAL-2026-3994/): Malicious code in @antv/g6-plugins (npm) (malicious package) - [MAL-2026-3993](https://insights.sbomify.com/MAL-2026-3993/): Malicious code in @antv/g6-plugin-map-view (npm) (malicious package) - [MAL-2026-3992](https://insights.sbomify.com/MAL-2026-3992/): Malicious code in @antv/g6-plugin (npm) (malicious package) - [MAL-2026-3991](https://insights.sbomify.com/MAL-2026-3991/): Malicious code in @antv/g6-pc (npm) (malicious package) - [MAL-2026-3990](https://insights.sbomify.com/MAL-2026-3990/): Malicious code in @antv/g6-mobile (npm) (malicious package) - [MAL-2026-399](https://insights.sbomify.com/MAL-2026-399/): Malicious code in torbaileys (npm) (malicious package) - [MAL-2026-3989](https://insights.sbomify.com/MAL-2026-3989/): Malicious code in @antv/g6-extension-react (npm) (malicious package) - [MAL-2026-3988](https://insights.sbomify.com/MAL-2026-3988/): Malicious code in @antv/g6-extension-3d (npm) (malicious package) - [MAL-2026-3987](https://insights.sbomify.com/MAL-2026-3987/): Malicious code in @antv/g6-element (npm) (malicious package) - [MAL-2026-3986](https://insights.sbomify.com/MAL-2026-3986/): Malicious code in @antv/g6-editor (npm) (malicious package) - [MAL-2026-3985](https://insights.sbomify.com/MAL-2026-3985/): Malicious code in @antv/g6-core (npm) (malicious package) - [MAL-2026-3984](https://insights.sbomify.com/MAL-2026-3984/): Malicious code in @antv/g6-cli (npm) (malicious package) - [MAL-2026-3983](https://insights.sbomify.com/MAL-2026-3983/): Malicious code in @antv/g6-alipay (npm) (malicious package) - [MAL-2026-3982](https://insights.sbomify.com/MAL-2026-3982/): Malicious code in @antv/g6 (npm) (malicious package) - [MAL-2026-3981](https://insights.sbomify.com/MAL-2026-3981/): Malicious code in @antv/g2plot-schemas (npm) (malicious package) - [MAL-2026-3980](https://insights.sbomify.com/MAL-2026-3980/): Malicious code in @antv/g2plot (npm) (malicious package) - [MAL-2026-398](https://insights.sbomify.com/MAL-2026-398/): Malicious code in tor-libsignal (npm) (malicious package) - [MAL-2026-3979](https://insights.sbomify.com/MAL-2026-3979/): Malicious code in @antv/g2-ssr (npm) (malicious package) - [MAL-2026-3978](https://insights.sbomify.com/MAL-2026-3978/): Malicious code in @antv/g2-plugin-slider (npm) (malicious package) - [MAL-2026-3977](https://insights.sbomify.com/MAL-2026-3977/): Malicious code in @antv/g2-extension-plot (npm) (malicious package) - [MAL-2026-3976](https://insights.sbomify.com/MAL-2026-3976/): Malicious code in @antv/g2-extension-ava (npm) (malicious package) - [MAL-2026-3975](https://insights.sbomify.com/MAL-2026-3975/): Malicious code in @antv/g2-extension-3d (npm) (malicious package) - [MAL-2026-3974](https://insights.sbomify.com/MAL-2026-3974/): Malicious code in @antv/g2-brush (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/74/