Notes from inside the catalog layer.

Reading the antv/g2 npm compromise like a catalog operator

In mid-May 2025 an attacker compromised an antv maintainer account and pushed a credential-stealing payload through @antv/g2 to everything that transitively depended on it. The useful question isn't whether we'd have caught it — it's what would have been cheap to catch, and what the next one looks like.