MAL-2026-11562 Malicious code in @deliveroo/determinator (npm)

npm/@deliveroo/determinator is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11563 Malicious code in @deliveroo/reevent (npm)

npm/@deliveroo/reevent is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in @deliveroo/reevent (npm)

npm/@deliveroo/reevent is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Deliveroo: Restaurant Delivery - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Deliveroo: Restaurant Delivery published at the 'play' market has multiple vulnerabilities...