目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%
← 返回恶意软件包
npm active

analysis-chart

MAL-2026-10890
2026-07-23 03:57:23
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境,并排查凭据泄露和异常网络连接。

Summary

Malicious code in analysis-chart (npm)

AI 分析整理qwen3.6
基于上游报告生成,请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
6
数据源
npmjs.org
下载量只代表仓库活动度,不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmanalysis-chart2.0.10
npmanalysis-chart2.0.11
npmanalysis-chart2.0.12
npmanalysis-chart2.0.13
npmanalysis-chart2.0.14
npmanalysis-chart2.0.15
npmanalysis-chart2.0.16
npmanalysis-chart2.0.17
npmanalysis-chart2.0.18
npmanalysis-chart2.0.19
npmanalysis-chart2.0.20
npmanalysis-chart2.0.21
npmanalysis-chart2.0.22
npmanalysis-chart2.0.23
npmanalysis-chart2.0.24
npmanalysis-chart2.0.25
npmanalysis-chart2.0.26
npmanalysis-chart2.0.27
npmanalysis-chart2.0.28
npmanalysis-chart2.0.8
npmanalysis-chart2.0.9
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2026-07-23T03:57:23Z","published":"2026-07-20T10:33:23Z","schema_version":"1.7.4","id":"MAL-2026-10890","aliases":["GHSA-2h56-6c2c-2475","MAL-2026-6299"],"summary":"Malicious code in analysis-chart (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"analysis-chart"},"versions":["2.0.8","2.0.9","2.0.10","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.18","2.0.19","2.0.20","2.0.21","2.0.22","2.0.23","2.0.24","2.0.25","2.0.26","2.0.27","2.0.28"]}]}

数据来源:OpenSSF Malicious Packages · Apache-2.0