See the full list of npm packages compromised in the "Antv Supply Chain Compromise - May 2026" [View compromised packages].
graphql-upload
Middleware and a scalar Upload to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.
