Supply Chain Incidents

MAL-2026-11841

Malicious code in @servicetitan/contentful (npm)

MAL-2026-11858

Malicious code in @servicetitan/eh-module-communication (npm)

MAL-2026-11951

Malicious code in @servicetitan/widget-platform-monolith (npm)

MAL-2026-11882

Malicious code in @servicetitan/kendo-theme (npm)

MAL-2026-11821

Malicious code in @servicetitan/anvil-token (npm)

MAL-2026-11911

Malicious code in @servicetitan/quick-actions (npm)

MAL-2026-11878

Malicious code in @servicetitan/html-sketchapp (npm)

MAL-2026-11895

Malicious code in @servicetitan/marketing-route (npm)

MAL-2026-11864

Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm)

MAL-2026-11837

Malicious code in @servicetitan/carto-tokens (npm)

MAL-2026-11924

Malicious code in @servicetitan/startup-jest (npm)

MAL-2026-11926

Malicious code in @servicetitan/startup-utils (npm)

MAL-2026-11912

Malicious code in @servicetitan/react-hooks (npm)

MAL-2026-11892

Malicious code in @servicetitan/marketing-form (npm)

MAL-2026-11991

Malicious code in verdaccio-tarball-local-storage (npm)

MAL-2026-11893

Malicious code in @servicetitan/marketing-global-route (npm)

MAL-2026-11855

Malicious code in @servicetitan/document-title (npm)

MAL-2026-11990

Malicious code in verdaccio-okta-oauth (npm)

MAL-2026-11898

Malicious code in @servicetitan/measure-sheet-data (npm)

MAL-2026-11660

Malicious code in @onereach/ui-components (npm)

MAL-2026-11617

Malicious code in @onereach/orest-vue-demi-vue2 (npm)

MAL-2026-11853

Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

MAL-2026-11608

Malicious code in @onereach/or-browser (npm)

MAL-2026-11604

Malicious code in @onereach/idw-sdk (npm)