discovered 2026-08-04
Qlik SDK. Representative of ~28 compromised @qlik packages + ~22 @nebula.js packages + 6 unscoped Qlik packages. Compromised via qlikossbuild account. Variant B payload.
