Malicious code in @jm-telefonica/multibrand-components (npm)
Newly collected advisory
MAL-2026-18284
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityMalicious code in @jm-telefonica/multibrand-components (npm)
Newly collected advisory
MAL-2026-18284
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @postex/common (npm)
Newly collected advisory
MAL-2026-18285
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-banner (npm)2 source records
Newly collected advisory
MAL-2026-18272
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Affected-version evidence changed
MAL-2026-18272
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-builder (npm)2 source records
Affected-version evidence changed
MAL-2026-18273
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Newly collected advisory
MAL-2026-18273
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-headerfooter (npm)
Newly collected advisory
MAL-2026-18274
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-hotel-collection (npm)
Newly collected advisory
MAL-2026-18275
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-navigation (npm)
Newly collected advisory
MAL-2026-18286
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-searchform (npm)
Newly collected advisory
MAL-2026-18287
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in appit-cordova-admob (npm)
Newly collected advisory
MAL-2026-18253
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in appit-cordova-plugin-ionic (npm)
Newly collected advisory
MAL-2026-18254
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in cert-infos (npm)
Newly collected advisory
MAL-2026-18255
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in cordova-plugin-geofence-appit (npm)
Newly collected advisory
MAL-2026-18256
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in event-bus-lite-testmetest (npm)
Newly collected advisory
MAL-2026-18292
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in insta-api-wrapper (npm)
Newly collected advisory
MAL-2026-18257
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in insta-reel-search (npm)
Newly collected advisory
MAL-2026-18258
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-insta-api-wrapper (npm)
Affected-version evidence changed
MAL-2026-4588
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-insta-search (npm)
Newly collected advisory
MAL-2026-18259
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-sound-cloud-loader-api (npm)
Newly collected advisory
MAL-2026-18260
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-tiktok-scraper (npm)
Newly collected advisory
MAL-2026-18261
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-youtube-search (npm)
Newly collected advisory
MAL-2026-18262
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ionic-youtube-streams (npm)
Newly collected advisory
MAL-2026-18263
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in jshelperdependenceny (npm)
Newly collected advisory
MAL-2026-18288
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in noelc-css-blender (npm)
Newly collected advisory
MAL-2026-18249
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ocsp-hashes (npm)
Newly collected advisory
MAL-2026-18264
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.