Supply Chain Incidents

MAL-2026-11644

Malicious code in @onereach/si-select (npm)

MAL-2026-11668

Malicious code in @or-sdk/agents (npm)

MAL-2026-11671

Malicious code in @or-sdk/apps (npm)

MAL-2026-11698

Malicious code in @or-sdk/identifiers (npm)

MAL-2026-11738

Malicious code in @or-sdk/web-search (npm)

MAL-2026-11694

Malicious code in @or-sdk/flow-templates (npm)

MAL-2026-11658

Malicious code in @onereach/ts-memoize (npm)

MAL-2026-11659

Malicious code in @onereach/types-contacts-api (npm)

MAL-2026-11618

Malicious code in @onereach/orest-vue-demi-vue3 (npm)

MAL-2026-11554

Malicious code in @arv-bedrock/auth-admin (npm)

MAL-2026-11610

Malicious code in @onereach/or-content-builder-renderer (npm)

MAL-2026-11781

Malicious code in @picsart/ai-sdk (npm)

MAL-2026-11606

Malicious code in @onereach/lambda-invocation (npm)

MAL-2026-11693

Malicious code in @or-sdk/files-sync-node (npm)

MAL-2026-11597

Malicious code in @onereach/content-builder-template-compiler (npm)

MAL-2026-11594

Malicious code in @onereach/ckeditor5-build-classic (npm)

MAL-2026-11728

Malicious code in @or-sdk/source-api (npm)

MAL-2026-11767

Malicious code in @ornikar/prismic-components (npm)

MAL-2026-11654

Malicious code in @onereach/step-run-snowflake-query (npm)

MAL-2026-11980

Malicious code in pob-test-package-in-monorepo (npm)

MAL-2026-11747

Malicious code in @ornikar/eslint-config-babel-use (npm)

MAL-2026-11621

Malicious code in @onereach/pnpm-audit-junit (npm)

MAL-2026-11615

Malicious code in @onereach/orest-input-cli (npm)

MAL-2026-11713

Malicious code in @or-sdk/mcp-tools (npm)