Supply Chain Incidents

MAL-2026-11654

Malicious code in @onereach/step-run-snowflake-query (npm)

MAL-2026-11980

Malicious code in pob-test-package-in-monorepo (npm)

MAL-2026-11747

Malicious code in @ornikar/eslint-config-babel-use (npm)

MAL-2026-11621

Malicious code in @onereach/pnpm-audit-junit (npm)

MAL-2026-11615

Malicious code in @onereach/orest-input-cli (npm)

MAL-2026-11713

Malicious code in @or-sdk/mcp-tools (npm)

MAL-2026-11718

Malicious code in @or-sdk/permissions-cli (npm)

MAL-2026-11714

Malicious code in @or-sdk/notifications (npm)

MAL-2026-11631

Malicious code in @onereach/si-checkbox-group (npm)

MAL-2026-11657

Malicious code in @onereach/time-interpreter (npm)

MAL-2026-11650

Malicious code in @onereach/slack-helpers (npm)

MAL-2026-11708

Malicious code in @or-sdk/library-source (npm)

MAL-2026-11722

Malicious code in @or-sdk/qna (npm)

MAL-2026-11553

Malicious code in @arv-bedrock/auth (npm)

MAL-2026-11965

Malicious code in conv-context-next (npm)

MAL-2026-11721

Malicious code in @or-sdk/providers (npm)

MAL-2026-11556

Malicious code in @arv-bedrock/auth-sso-backend (npm)

MAL-2026-11611

Malicious code in @onereach/or-file-uploader-next (npm)

MAL-2026-11557

Malicious code in @arv-bedrock/logger (npm)

MAL-2026-11976

Malicious code in native-frontend-orb (npm)

MAL-2026-11555

Malicious code in @arv-bedrock/auth-sso (npm)

MAL-2026-11742

Malicious code in @ornikar/babel-preset-react (npm)

MAL-2026-11778

Malicious code in @ornikar/stylelint-config (npm)

MAL-2026-11774

Malicious code in @ornikar/rollup-config (npm)