Warning: Con artists have likely gained admin access to the Client-side GChart project. Consequently, John Curtis Gunther is no longer administering this Google code project, or using the johncurtisgunther Google account.
On two occasions, I have deleted the same inappropriate attachments posted on the GChart issue tracker only to find that these attachments were undeleted without any further action on my part.
Since only johncurtisgunther (the GChart project admin) can undelete attachments, the simplest explanation for these events is that con artists have obtained the johncurtisgunther Google account password.
Unfortunately, I have not been able to find a fool-proof way to assure, beyond reasonable doubt, that unknown, possibly bad-acting, persons will not have inappropriate access to the GChart project going forward (I did change passwords, but Google accounts are complex, and my knowledge of them limited, so I cannot be sure the intruders don't still have some sort of back door).
So I've decided to just make a clean break: disavowing/abandoning my own project and Google account. Specifically, I no longer have any association with, and will make no updates, releases, posts or emails from, the GChart project located at http://gchart.googlecode.com, the google id johncurtisgunther@gmail.com, and the yahoo id johncurtisgunther@yahoo.com.
In light of this experience, I'd urge anyone releasing a project on Google Code to have a rock-solid plan for assuring that others cannot access your Google account password. And if that plan does not consider the scenario of a drive-by download triggered by visiting a link posted on your project's issue tracker, it still needs some work.
