Supply Chain Incidents

MAL-2026-11926

Malicious code in @servicetitan/startup-utils (npm)

MAL-2026-11912

Malicious code in @servicetitan/react-hooks (npm)

MAL-2026-11892

Malicious code in @servicetitan/marketing-form (npm)

MAL-2026-11991

Malicious code in verdaccio-tarball-local-storage (npm)

MAL-2026-11893

Malicious code in @servicetitan/marketing-global-route (npm)

MAL-2026-11855

Malicious code in @servicetitan/document-title (npm)

MAL-2026-11990

Malicious code in verdaccio-okta-oauth (npm)

MAL-2026-11898

Malicious code in @servicetitan/measure-sheet-data (npm)

MAL-2026-11660

Malicious code in @onereach/ui-components (npm)

MAL-2026-11617

Malicious code in @onereach/orest-vue-demi-vue2 (npm)

MAL-2026-11853

Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

MAL-2026-11608

Malicious code in @onereach/or-browser (npm)

MAL-2026-11604

Malicious code in @onereach/idw-sdk (npm)

MAL-2026-11881

Malicious code in @servicetitan/json-render-react (npm)

MAL-2026-11863

Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)

MAL-2026-11601

Malicious code in @onereach/idw-apps (npm)

MAL-2026-11886

Malicious code in @servicetitan/ld-type-generator (npm)

MAL-2026-11946

Malicious code in @servicetitan/uikit-docs (npm)

MAL-2026-11876

Malicious code in @servicetitan/hash-browser-router (npm)

MAL-2026-11922

Malicious code in @servicetitan/standalone-ui (npm)

MAL-2026-11712

Malicious code in @or-sdk/markdowner (npm)

MAL-2026-11838

Malicious code in @servicetitan/component-usage (npm)

MAL-2026-11619

Malicious code in @onereach/orest-vue3 (npm)

MAL-2026-11857

Malicious code in @servicetitan/dte-unlayer (npm)