Weekly briefing Week 2026-W43
Weekly briefing Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
← Week 42 Last 7 days Week 44 →
Briefing All changes Upcoming dates Source inventory Coverage
All dated changes in this period1124 source records · 1008 groups
25 Oct 2026
Security Malicious code in @ppa-web-components/ppa-builder (npm) 2 source records
Affected-version evidence changed · 2 entries
Malicious code in @ppa-web-components/ppa-builder (npm) Affected-version evidence changed
MAL-2026-18273
Assessment context Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Malicious code in @ppa-web-components/ppa-builder (npm) Newly collected advisory
MAL-2026-18273
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in @ppa-web-components/ppa-headerfooter (npm)
Newly collected advisory
MAL-2026-18274
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in @ppa-web-components/ppa-hotel-collection (npm)
Newly collected advisory
MAL-2026-18275
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in @ppa-web-components/ppa-navigation (npm)
Newly collected advisory
MAL-2026-18286
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in @ppa-web-components/ppa-searchform (npm)
Newly collected advisory
MAL-2026-18287
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in appit-cordova-admob (npm)
Newly collected advisory
MAL-2026-18253
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in appit-cordova-plugin-ionic (npm)
Newly collected advisory
MAL-2026-18254
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in cert-infos (npm)
Newly collected advisory
MAL-2026-18255
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in cordova-plugin-geofence-appit (npm)
Newly collected advisory
MAL-2026-18256
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in event-bus-lite-testmetest (npm)
Newly collected advisory
MAL-2026-18292
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in insta-api-wrapper (npm)
Newly collected advisory
MAL-2026-18257
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in insta-reel-search (npm)
Newly collected advisory
MAL-2026-18258
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-insta-api-wrapper (npm)
Affected-version evidence changed
MAL-2026-4588
Assessment context Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-insta-search (npm)
Newly collected advisory
MAL-2026-18259
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-sound-cloud-loader-api (npm)
Newly collected advisory
MAL-2026-18260
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-tiktok-scraper (npm)
Newly collected advisory
MAL-2026-18261
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-youtube-search (npm)
Newly collected advisory
MAL-2026-18262
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ionic-youtube-streams (npm)
Newly collected advisory
MAL-2026-18263
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in jshelperdependenceny (npm)
Newly collected advisory
MAL-2026-18288
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in noelc-css-blender (npm)
Newly collected advisory
MAL-2026-18249
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in ocsp-hashes (npm)
Newly collected advisory
MAL-2026-18264
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in p12-pem (npm)
Newly collected advisory
MAL-2026-18265
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in paychex-pdftron (npm)
Newly collected advisory
MAL-2026-18289
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
25 Oct 2026
Security Malicious code in react-native-bright-sdk (npm)
Newly collected advisory
MAL-2026-18290
Assessment context Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.