MAL-2026-11918 Malicious code in @servicetitan/standalone-core-feature-gates (npm)

npm/@servicetitan/standalone-core-feature-gates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

Malicious code in @servicetitan/marketing-integration-widgets (npm)

npm/@servicetitan/marketing-integration-widgets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...