Supply Chain Incidents

MAL-2026-11679

Malicious code in @or-sdk/card-templates (npm)

MAL-2026-11647

Malicious code in @onereach/si-text-message (npm)

MAL-2026-11815

Malicious code in @servicetitan/anvil-css-utilities (npm)

MAL-2026-11830

Malicious code in @servicetitan/assist-ui (npm)

MAL-2026-11614

Malicious code in @onereach/orest-cli (npm)

MAL-2026-11952

Malicious code in @thiennq/docs-viewer (npm)

MAL-2026-11879

Malicious code in @servicetitan/install (npm)

MAL-2026-11861

Malicious code in @servicetitan/eslint-plugin (npm)

MAL-2026-11873

Malicious code in @servicetitan/hammer-icon (npm)

MAL-2026-11818

Malicious code in @servicetitan/anvil-icons (npm)

MAL-2026-11564

Malicious code in @hubsync/web-sdk-react (npm)

MAL-2026-11808

Malicious code in @qlik/sprout-react (npm)

MAL-2026-11820

Malicious code in @servicetitan/anvil-themes (npm)

MAL-2026-11897

Malicious code in @servicetitan/marketing-widgets (npm)

MAL-2026-11949

Malicious code in @servicetitan/web-components (npm)

MAL-2026-11782

Malicious code in @picsart/gen-ai (npm)

MAL-2026-11756

Malicious code in @ornikar/graphql-config (npm)

MAL-2026-11754

Malicious code in @ornikar/eslint-plugin-neverthrow (npm)

MAL-2026-11682

Malicious code in @or-sdk/chat (npm)

MAL-2026-11600

Malicious code in @onereach/get-version-data (npm)

MAL-2026-11707

Malicious code in @or-sdk/library-categories (npm)

MAL-2026-11591

Malicious code in @onereach/cb-schema-translator (npm)

MAL-2026-11696

Malicious code in @or-sdk/graph (npm)

MAL-2026-11656

Malicious code in @onereach/styles (npm)