Supply Chain Incidents

MAL-2026-11643

Malicious code in @onereach/si-root (npm)

MAL-2026-11645

Malicious code in @onereach/si-step-chooser (npm)

MAL-2026-11662

Malicious code in @onereach/ui-components-vue2 (npm)

MAL-2026-11730

Malicious code in @or-sdk/store (npm)

MAL-2026-11720

Malicious code in @or-sdk/pgsql (npm)

MAL-2026-11678

Malicious code in @or-sdk/bots (npm)

MAL-2026-11685

Malicious code in @or-sdk/data-hub (npm)

MAL-2026-11732

Malicious code in @or-sdk/tags (npm)

MAL-2026-11598

Malicious code in @onereach/expression-components (npm)

MAL-2026-11692

Malicious code in @or-sdk/files (npm)

MAL-2026-11669

Malicious code in @or-sdk/api-tokens (npm)

MAL-2026-11632

Malicious code in @onereach/si-code (npm)

MAL-2026-11699

Malicious code in @or-sdk/idw (npm)

MAL-2026-11661

Malicious code in @onereach/ui-components-common (npm)

MAL-2026-11676

Malicious code in @or-sdk/billing-internal (npm)

MAL-2026-11599

Malicious code in @onereach/font-icons (npm)

MAL-2026-11702

Malicious code in @or-sdk/invitations (npm)

MAL-2026-11653

Malicious code in @onereach/step-conversation (npm)

MAL-2026-11588

Malicious code in @onereach/bandwidth-steps-voice-bxml (npm)

MAL-2026-11672

Malicious code in @or-sdk/auth (npm)

MAL-2026-11700

Malicious code in @or-sdk/idw-public (npm)

MAL-2026-11667

Malicious code in @or-sdk/adapters (npm)

MAL-2026-11607

Malicious code in @onereach/messengers-infobip-sdk (npm)

MAL-2026-11695

Malicious code in @or-sdk/flows (npm)