npm

@antv/x6 @3.3.7

Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC

Malicious

OSV ID

MAL-2026-3839

Ecosystem

npm

Summary

The package @antv/x6 was found to contain malicious code.

Source: amazon-inspector (9c2c1d8cb2409c5d7ae88578b20ae462cbba1d139bfe41c0ff5520b48378ea94)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.