Supply Chain Incidents

MAL-2026-11889

Malicious code in @servicetitan/log-service (npm)

MAL-2026-11710

Malicious code in @or-sdk/library-types-v2 (npm)

MAL-2026-11602

Malicious code in @onereach/idw-contracts (npm)

MAL-2026-11985

Malicious code in rwc-client (npm)

MAL-2026-11875

Malicious code in @servicetitan/hammer-token (npm)

MAL-2026-11945

Malicious code in @servicetitan/toolbelt-shared-registry (npm)

MAL-2026-11630

Malicious code in @onereach/si-checkbox (npm)

MAL-2026-11628

Malicious code in @onereach/si-a-button (npm)

MAL-2026-11930

Malicious code in @servicetitan/tanstack-query-mobx (npm)

MAL-2026-11603

Malicious code in @onereach/idw-init-account-resources (npm)

MAL-2026-11874

Malicious code in @servicetitan/hammer-react (npm)

MAL-2026-11674

Malicious code in @or-sdk/base (npm)

MAL-2026-11613

Malicious code in @onereach/or-sdk-agent-cli (npm)

MAL-2026-11635

Malicious code in @onereach/si-datepicker (npm)

MAL-2026-11673

Malicious code in @or-sdk/authorizer (npm)

MAL-2026-11592

Malicious code in @onereach/channel-transformer (npm)

MAL-2026-11723

Malicious code in @or-sdk/queue-manager (npm)

MAL-2026-11816

Malicious code in @servicetitan/anvil-fonts (npm)

MAL-2026-11719

Malicious code in @or-sdk/permissions-lambda (npm)

MAL-2026-11633

Malicious code in @onereach/si-collapsible-group (npm)

MAL-2026-11605

Malicious code in @onereach/idw-ui-components (npm)

MAL-2026-11683

Malicious code in @or-sdk/contacts (npm)

MAL-2026-11681

Malicious code in @or-sdk/ccp (npm)

MAL-2026-11852

Malicious code in @servicetitan/design-system (npm)