npm

@antv/s2 @2.9.1

Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC

Malicious

OSV ID

MAL-2026-4077

Ecosystem

npm

Summary

The package @antv/s2 was found to contain malicious code.

Source: amazon-inspector (918f8afc332333e09ab6eebe94e1ede7b4b8a506a46c2c5492d4dfd04479c2d8)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.