npm package report
Is @antv/g6 safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@antv/g6 · verdict BLOCK · blocked
9.2/10
XYZ SCORE
SUMMARY
Verdict BLOCK · 12 graph-tracked dependencies · 3 flagged · provenance: unknown
Known Malicious PackagematchedCRITICAL
Human-verified malicious package in the CyberXYZ corpus (Signal C).
Anomaly HistoryclearOK
1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.
@alipay/antv-bin@^1.1.2clean
@ant-design/colors@^4.0.5clean
ant-design-palettes@~1.1.2clean
antd-mobile@^2.3.4clean
@antv/algorithm@^0.1.25block
@antv/bin@^0.2.3-beta.1clean
@antv/chart-node-g6@^0.0.2clean
@antv/color-util@^2.0.5block
@antv/component@~0.0.4clean
@antv/dom-util@^2.0.1clean
@antv/event-emitter@~0.1.0clean
@antv/g@~2.0.7-beta.6block
PACKAGE @antv/g6ECOSYSTEM npmDECISION BLOCK
Package facts
Weekly downloads
476.9k
GitHub stars
11.9k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
12
Flagged dependencies
3
History on this package: popular package (521 versions over 103d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
antv__graphinantv__hierarchyantv__setupantv__g2plotantv__g2antv__g-plugin-canvas-picker