Supply Chain Incidents

MAL-2026-11852

Malicious code in @servicetitan/design-system (npm)

MAL-2026-11624

Malicious code in @onereach/regular-expressions (npm)

MAL-2026-11620

Malicious code in @onereach/phonenumber-interpreter (npm)

MAL-2026-11686

Malicious code in @or-sdk/data-hub-svc (npm)

MAL-2026-11724

Malicious code in @or-sdk/sdk-api (npm)

MAL-2026-11705

Malicious code in @or-sdk/knowledge-models (npm)

MAL-2026-11725

Malicious code in @or-sdk/settings (npm)

MAL-2026-11948

Malicious code in @servicetitan/va-mfe-loader (npm)

MAL-2026-11921

Malicious code in @servicetitan/standalone-tm-api (npm)

MAL-2026-11596

Malicious code in @onereach/content-builder (npm)

MAL-2026-11797

Malicious code in @qlik/eslint-config-vue (npm)

MAL-2026-11887

Malicious code in @servicetitan/line-item-editor (npm)

MAL-2026-11664

Malicious code in @onereach/webform (npm)

MAL-2026-11641

Malicious code in @onereach/si-merge-tag-input (npm)

MAL-2026-11900

Malicious code in @servicetitan/micro-frontend (npm)

MAL-2026-11914

Malicious code in @servicetitan/responsive (npm)

MAL-2026-11906

Malicious code in @servicetitan/moneyout-api-client (npm)

MAL-2026-11870

Malicious code in @servicetitan/form (npm)

MAL-2026-11894

Malicious code in @servicetitan/marketing-integration-widgets (npm)

MAL-2026-11616

Malicious code in @onereach/orest-jest-presets (npm)

MAL-2026-11849

Malicious code in @servicetitan/data-query (npm)

MAL-2026-11944

Malicious code in @servicetitan/tokens (npm)

MAL-2026-11819

Malicious code in @servicetitan/anvil-react (npm)

MAL-2026-11932

Malicious code in @servicetitan/testing-library (npm)