Supply Chain Incidents

MAL-2026-11780

Malicious code in @ornikar/webpack-config (npm)

MAL-2026-11748

Malicious code in @ornikar/eslint-config-formatjs (npm)

MAL-2026-11741

Malicious code in @ornikar/babel-preset-kitt-universal (npm)

MAL-2026-11765

Malicious code in @ornikar/postcss-config (npm)

MAL-2026-11981

Malicious code in pob-test-typescript-package-in-monorepo (npm)

MAL-2026-11746

Malicious code in @ornikar/eslint-config-babel (npm)

MAL-2026-11750

Malicious code in @ornikar/eslint-config-react (npm)

MAL-2026-11743

Malicious code in @ornikar/browserslist-config (npm)

MAL-2026-11777

Malicious code in @ornikar/storybook-config (npm)

MAL-2026-11757

Malicious code in @ornikar/intl-config (npm)

MAL-2026-11744

Malicious code in @ornikar/commitlint-config (npm)

MAL-2026-11751

Malicious code in @ornikar/eslint-config-typescript (npm)

MAL-2026-11752

Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)

MAL-2026-11745

Malicious code in @ornikar/eslint-config (npm)

MAL-2026-11848

Malicious code in @servicetitan/culture (npm)

MAL-2026-11665

Malicious code in @or-sdk/account-settings (npm)

MAL-2026-11652

Malicious code in @onereach/step-components (npm)

MAL-2026-11737

Malicious code in @or-sdk/views (npm)

MAL-2026-11649

Malicious code in @onereach/si-validated-timestring-input (npm)

MAL-2026-11687

Malicious code in @or-sdk/deployer (npm)

MAL-2026-11929

Malicious code in @servicetitan/table (npm)

MAL-2026-11920

Malicious code in @servicetitan/standalone-root (npm)

MAL-2026-11829

Malicious code in @servicetitan/anvil2-mcp (npm)

MAL-2026-11854

Malicious code in @servicetitan/docs-uikit (npm)