{"id":"MAL-2026-10890","summary":"Malicious code in analysis-chart (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-2h56-6c2c-2475","MAL-2026-6299"],"modified":"2026-07-23T07:50:56.515888962Z","published":"2026-07-20T10:33:23Z","affected":[{"package":{"name":"analysis-chart","ecosystem":"npm","purl":"pkg:npm/analysis-chart"},"versions":["2.0.8","2.0.9","2.0.10","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.18","2.0.19","2.0.20","2.0.21","2.0.22","2.0.23","2.0.24","2.0.25","2.0.26","2.0.27","2.0.28"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/analysis-chart/MAL-2026-10890.json"}}],"schema_version":"1.7.5"}