Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 06:23 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

2299 source records · 1656 groups

Malicious code in p12-pem (npm)

Newly collected advisory

MAL-2026-18265

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in paychex-pdftron (npm)

Newly collected advisory

MAL-2026-18289

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in react-native-bright-sdk (npm)

Newly collected advisory

MAL-2026-18290

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in redis-dumper (npm)

Newly collected advisory

MAL-2026-18266

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in sc-hydrate-carousel-price (npm)

Newly collected advisory

MAL-2026-18291

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in sound-cloud-loader-api (npm)

Newly collected advisory

MAL-2026-18267

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in tailwind-base-buttons (npm)

Newly collected advisory

MAL-2026-18250

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in tailwindcss-theme-kit (npm)

Newly collected advisory

MAL-2026-18251

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in tiktok-video-scraper (npm)

Newly collected advisory

MAL-2026-18268

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in tostpro (npm)

Affected-version evidence changed

MAL-2026-17564

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

Affected-version evidence changed · 2 entries

  • Malicious code in w-mousekey (npm)

    Affected-version evidence changed

    MAL-2026-18293

    Assessment context

    Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

  • Malicious code in w-mousekey (npm)

    Newly collected advisory

    MAL-2026-18293

    Assessment context

    Newly collected advisory; observed by ChangeIntel, not the original publication date.

Malicious code in youtube-info-streams (npm)

Newly collected advisory

MAL-2026-18269

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 06:23 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current