Supply Chain Incidents

MAL-2026-11695

Malicious code in @or-sdk/flows (npm)

MAL-2026-11697

Malicious code in @or-sdk/hitl (npm)

MAL-2026-11655

Malicious code in @onereach/step-voice (npm)

MAL-2026-11711

Malicious code in @or-sdk/lookup (npm)

MAL-2026-11589

Malicious code in @onereach/billing-dto (npm)

MAL-2026-11734

Malicious code in @or-sdk/transcripts (npm)

MAL-2026-11644

Malicious code in @onereach/si-select (npm)

MAL-2026-11668

Malicious code in @or-sdk/agents (npm)

MAL-2026-11698

Malicious code in @or-sdk/identifiers (npm)

MAL-2026-11671

Malicious code in @or-sdk/apps (npm)

MAL-2026-11738

Malicious code in @or-sdk/web-search (npm)

MAL-2026-11694

Malicious code in @or-sdk/flow-templates (npm)

MAL-2026-11659

Malicious code in @onereach/types-contacts-api (npm)

MAL-2026-11658

Malicious code in @onereach/ts-memoize (npm)

MAL-2026-11618

Malicious code in @onereach/orest-vue-demi-vue3 (npm)

MAL-2026-11554

Malicious code in @arv-bedrock/auth-admin (npm)

MAL-2026-11610

Malicious code in @onereach/or-content-builder-renderer (npm)

MAL-2026-11781

Malicious code in @picsart/ai-sdk (npm)

MAL-2026-11606

Malicious code in @onereach/lambda-invocation (npm)

MAL-2026-11594

Malicious code in @onereach/ckeditor5-build-classic (npm)

MAL-2026-11693

Malicious code in @or-sdk/files-sync-node (npm)

MAL-2026-11597

Malicious code in @onereach/content-builder-template-compiler (npm)

MAL-2026-11728

Malicious code in @or-sdk/source-api (npm)

MAL-2026-11767

Malicious code in @ornikar/prismic-components (npm)