Malicious code in @s4yhiitestpoc/r2-https-b (npm)
Affected-version evidence changed
MAL-2026-17808
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
66 source records · 66 groupsSecurityMalicious code in @s4yhiitestpoc/r2-https-dualuse (npm)
Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)
Newly collected advisory
MAL-2026-18305
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/scan-control-a (npm)
Malicious code in @s4yhiitestpoc/scan-control-a (npm)
Newly collected advisory
MAL-2026-18306
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/scan-dns-c (npm)
Malicious code in @s4yhiitestpoc/scan-dns-c (npm)
Newly collected advisory
MAL-2026-18307
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/scan-echo-b (npm)
Malicious code in @s4yhiitestpoc/scan-echo-b (npm)
Newly collected advisory
MAL-2026-18308
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/scan-https-d (npm)
Malicious code in @s4yhiitestpoc/scan-https-d (npm)
Affected-version evidence changed
MAL-2026-17766
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)
Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)
Newly collected advisory
MAL-2026-18309
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @sxm-web/client-sdk-core (npm)
Malicious code in @sxm-web/client-sdk-core (npm)
Newly collected advisory
MAL-2026-18319
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @walknpm/todo-cli (npm)
Malicious code in @walknpm/todo-cli (npm)
Newly collected advisory
MAL-2026-18320
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in ap3-foundations-ui (npm)
Malicious code in ap3-foundations-ui (npm)
Affected-version evidence changed
MAL-2026-17806
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in bow-test (npm)
Malicious code in bow-test (npm)
Newly collected advisory
MAL-2026-18311
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in brass-common (npm)
Malicious code in brass-common (npm)
Affected-version evidence changed
MAL-2026-17849
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in css-flexgap-shim (npm)
Malicious code in css-flexgap-shim (npm)
Newly collected advisory
MAL-2026-18312
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in css-grid-snap-util (npm)
Malicious code in css-grid-snap-util (npm)
Newly collected advisory
MAL-2026-18313
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in css-hnhxwd-polyfill (npm)
Malicious code in css-hnhxwd-polyfill (npm)
Newly collected advisory
MAL-2026-18314
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in css-overscroll-contain (npm)
Malicious code in css-overscroll-contain (npm)
Affected-version evidence changed
MAL-2026-17705
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in dsh-native (npm)
Malicious code in dsh-native (npm)
Newly collected advisory
MAL-2026-18315
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in dsh-plugin-blender-3d (npm)
Malicious code in dsh-plugin-blender-3d (npm)
Newly collected advisory
MAL-2026-18321
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in monitoring-agent (npm)
Malicious code in monitoring-agent (npm)
Affected-version evidence changed
MAL-2026-17515
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in orderly-plugin-liquidity-heatmap (npm)
Malicious code in orderly-plugin-liquidity-heatmap (npm)
Affected-version evidence changed
MAL-2026-17848
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in react-dropzone-v4 (npm)
Malicious code in react-dropzone-v4 (npm)
Affected-version evidence changed
MAL-2026-17758
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in util-foriepft (npm)
Malicious code in util-foriepft (npm)
Affected-version evidence changed
MAL-2026-17878
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityQuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
Newly collected advisory
CVE-2026-116102
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityRace condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
Affected-version evidence changed
CVE-2026-12345
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.