Malicious code in @iobandamwer/cache-helper (npm)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

MAL-2026-18329

GHSA-j83w-xhgf-7m58

osv · MAL-2026-18329

• https://github.com/advisories/GHSA-j83w-xhgf-7m58
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.3
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.7
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.4
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.9
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.2
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.5
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.6
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.1.3
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.0.8
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.1.0
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.1.1
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/1.1.2
• https://www.npmjs.com/package/@iobandamwer/cache-helper/v/0.0.0-stage

No related operational record is retained in the current change model.