Supply Chain Incidents

MAL-2026-11617

Malicious code in @onereach/orest-vue-demi-vue2 (npm)

MAL-2026-11608

Malicious code in @onereach/or-browser (npm)

MAL-2026-11853

Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

MAL-2026-11881

Malicious code in @servicetitan/json-render-react (npm)

MAL-2026-11604

Malicious code in @onereach/idw-sdk (npm)

MAL-2026-11863

Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)

MAL-2026-11601

Malicious code in @onereach/idw-apps (npm)

MAL-2026-11886

Malicious code in @servicetitan/ld-type-generator (npm)

MAL-2026-11946

Malicious code in @servicetitan/uikit-docs (npm)

MAL-2026-11922

Malicious code in @servicetitan/standalone-ui (npm)

MAL-2026-11876

Malicious code in @servicetitan/hash-browser-router (npm)

MAL-2026-11712

Malicious code in @or-sdk/markdowner (npm)

MAL-2026-11619

Malicious code in @onereach/orest-vue3 (npm)

MAL-2026-11838

Malicious code in @servicetitan/component-usage (npm)

MAL-2026-11857

Malicious code in @servicetitan/dte-unlayer (npm)

MAL-2026-11913

Malicious code in @servicetitan/react-ioc (npm)

MAL-2026-11908

Malicious code in @servicetitan/navigation (npm)

MAL-2026-11851

Malicious code in @servicetitan/datetime-utils (npm)

MAL-2026-11666

Malicious code in @or-sdk/accounts (npm)

MAL-2026-11915

Malicious code in @servicetitan/restrict-imports (npm)

MAL-2026-11843

Malicious code in @servicetitan/cp-api (npm)

MAL-2026-11839

Malicious code in @servicetitan/confirm (npm)

MAL-2026-11677

Malicious code in @or-sdk/bot-templates (npm)

MAL-2026-11840

Malicious code in @servicetitan/confirm-navigation (npm)