npm package report
Is @antv/g2plot safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@antv/g2plot · verdict BLOCK · blocked
9.2/10
XYZ SCORE
Known Malicious PackagematchedCRITICAL
Human-verified malicious package in the CyberXYZ corpus (Signal C).
PACKAGE @antv/g2plotECOSYSTEM npmDECISION BLOCK
Package facts
Weekly downloads
305.1k
GitHub stars
2.6k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
0
History on this package: OpenSSF Scorecard overall=4.2 (2-5 — weak hygiene)
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
antv__g6antv__graphinantv__hierarchyantv__g2antv__g-plugin-canvas-pickerantv__g-lite