Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
MAL-2026-4069Malicious code in @antv/mcp-server-chart (npm)Also filed as GHSA-qgmj-c898-99rq unrated Not flagged May 19, 2026

Versions in the registry

0.9.10, 0.9.9, 0.9.8, 0.9.7, 0.9.6, 0.9.0-beta.1, 1.0.0 (package 0.9.0-beta.1) (listed)