Supply Chain Incidents

MAL-2026-11821

Malicious code in @servicetitan/anvil-token (npm)

MAL-2026-11878

Malicious code in @servicetitan/html-sketchapp (npm)

MAL-2026-11882

Malicious code in @servicetitan/kendo-theme (npm)

MAL-2026-11924

Malicious code in @servicetitan/startup-jest (npm)

MAL-2026-11864

Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm)

MAL-2026-11837

Malicious code in @servicetitan/carto-tokens (npm)

MAL-2026-11926

Malicious code in @servicetitan/startup-utils (npm)

MAL-2026-11892

Malicious code in @servicetitan/marketing-form (npm)

MAL-2026-11912

Malicious code in @servicetitan/react-hooks (npm)

MAL-2026-11991

Malicious code in verdaccio-tarball-local-storage (npm)

MAL-2026-11893

Malicious code in @servicetitan/marketing-global-route (npm)

MAL-2026-11855

Malicious code in @servicetitan/document-title (npm)

MAL-2026-11990

Malicious code in verdaccio-okta-oauth (npm)

MAL-2026-11898

Malicious code in @servicetitan/measure-sheet-data (npm)

MAL-2026-11660

Malicious code in @onereach/ui-components (npm)

MAL-2026-11617

Malicious code in @onereach/orest-vue-demi-vue2 (npm)

MAL-2026-11853

Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

MAL-2026-11608

Malicious code in @onereach/or-browser (npm)

MAL-2026-11881

Malicious code in @servicetitan/json-render-react (npm)

MAL-2026-11604

Malicious code in @onereach/idw-sdk (npm)

MAL-2026-11863

Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)

MAL-2026-11886

Malicious code in @servicetitan/ld-type-generator (npm)

MAL-2026-11601

Malicious code in @onereach/idw-apps (npm)

MAL-2026-11946

Malicious code in @servicetitan/uikit-docs (npm)