Supply Chain Incidents

MAL-2026-11876

Malicious code in @servicetitan/hash-browser-router (npm)

MAL-2026-11922

Malicious code in @servicetitan/standalone-ui (npm)

MAL-2026-11712

Malicious code in @or-sdk/markdowner (npm)

MAL-2026-11838

Malicious code in @servicetitan/component-usage (npm)

MAL-2026-11619

Malicious code in @onereach/orest-vue3 (npm)

MAL-2026-11913

Malicious code in @servicetitan/react-ioc (npm)

MAL-2026-11908

Malicious code in @servicetitan/navigation (npm)

MAL-2026-11857

Malicious code in @servicetitan/dte-unlayer (npm)

MAL-2026-11851

Malicious code in @servicetitan/datetime-utils (npm)

MAL-2026-11666

Malicious code in @or-sdk/accounts (npm)

MAL-2026-11839

Malicious code in @servicetitan/confirm (npm)

MAL-2026-11915

Malicious code in @servicetitan/restrict-imports (npm)

MAL-2026-11843

Malicious code in @servicetitan/cp-api (npm)

MAL-2026-11677

Malicious code in @or-sdk/bot-templates (npm)

MAL-2026-11840

Malicious code in @servicetitan/confirm-navigation (npm)

MAL-2026-11638

Malicious code in @onereach/si-dropdown-simple (npm)

MAL-2026-11701

Malicious code in @or-sdk/idw-skill (npm)

MAL-2026-11675

Malicious code in @or-sdk/billing (npm)

MAL-2026-11680

Malicious code in @or-sdk/cards (npm)

MAL-2026-11612

Malicious code in @onereach/or-pro (npm)

MAL-2026-11709

Malicious code in @or-sdk/library-types-v1 (npm)

MAL-2026-11663

Malicious code in @onereach/v-event-calendar (npm)

MAL-2026-11609

Malicious code in @onereach/or-browser-next (npm)

MAL-2026-11636

Malicious code in @onereach/si-divider (npm)