Summary

A compromised maintainer account was used to publish malicious package versions across the @antv namespace.

AI summaries can be wrong sometimes—always verify important details using the source article.