MSC-2026-12685

The npm package wix-ssr-thunderbolt-grid-polyfill version 0.1.0 contains embedded malicious code. It ships forged Wix Thunderbolt registry manifests rbwixui and rbdsgnsys that point the wixui namespace at this package's dist directory through Wix's static.parastorage.com unpkg mirror, so Wix...