Supply Chain Incidents

MAL-2026-11945

Malicious code in @servicetitan/toolbelt-shared-registry (npm)

MAL-2026-11630

Malicious code in @onereach/si-checkbox (npm)

MAL-2026-11628

Malicious code in @onereach/si-a-button (npm)

MAL-2026-11930

Malicious code in @servicetitan/tanstack-query-mobx (npm)

MAL-2026-11603

Malicious code in @onereach/idw-init-account-resources (npm)

MAL-2026-11874

Malicious code in @servicetitan/hammer-react (npm)

MAL-2026-11674

Malicious code in @or-sdk/base (npm)

MAL-2026-11613

Malicious code in @onereach/or-sdk-agent-cli (npm)

MAL-2026-11635

Malicious code in @onereach/si-datepicker (npm)

MAL-2026-11673

Malicious code in @or-sdk/authorizer (npm)

MAL-2026-11592

Malicious code in @onereach/channel-transformer (npm)

MAL-2026-11723

Malicious code in @or-sdk/queue-manager (npm)

MAL-2026-11816

Malicious code in @servicetitan/anvil-fonts (npm)

MAL-2026-11633

Malicious code in @onereach/si-collapsible-group (npm)

MAL-2026-11719

Malicious code in @or-sdk/permissions-lambda (npm)

MAL-2026-11605

Malicious code in @onereach/idw-ui-components (npm)

MAL-2026-11683

Malicious code in @or-sdk/contacts (npm)

MAL-2026-11681

Malicious code in @or-sdk/ccp (npm)

MAL-2026-11852

Malicious code in @servicetitan/design-system (npm)

MAL-2026-11626

Malicious code in @onereach/rwc-client (npm)

MAL-2026-11624

Malicious code in @onereach/regular-expressions (npm)

MAL-2026-11620

Malicious code in @onereach/phonenumber-interpreter (npm)

MAL-2026-11686

Malicious code in @or-sdk/data-hub-svc (npm)

MAL-2026-11724

Malicious code in @or-sdk/sdk-api (npm)