Supply Chain Incidents

MAL-2026-11638

Malicious code in @onereach/si-dropdown-simple (npm)

MAL-2026-11701

Malicious code in @or-sdk/idw-skill (npm)

MAL-2026-11675

Malicious code in @or-sdk/billing (npm)

MAL-2026-11680

Malicious code in @or-sdk/cards (npm)

MAL-2026-11612

Malicious code in @onereach/or-pro (npm)

MAL-2026-11709

Malicious code in @or-sdk/library-types-v1 (npm)

MAL-2026-11609

Malicious code in @onereach/or-browser-next (npm)

MAL-2026-11663

Malicious code in @onereach/v-event-calendar (npm)

MAL-2026-11636

Malicious code in @onereach/si-divider (npm)

MAL-2026-11704

Malicious code in @or-sdk/keys (npm)

MAL-2026-11629

Malicious code in @onereach/si-alert (npm)

MAL-2026-11637

Malicious code in @onereach/si-dropdown-advanced (npm)

MAL-2026-11646

Malicious code in @onereach/si-switch (npm)

MAL-2026-11639

Malicious code in @onereach/si-header (npm)

MAL-2026-11634

Malicious code in @onereach/si-copyable-text (npm)

MAL-2026-11640

Malicious code in @onereach/si-list (npm)

MAL-2026-11727

Malicious code in @or-sdk/source (npm)

MAL-2026-11651

Malicious code in @onereach/ssml-editor (npm)

MAL-2026-11690

Malicious code in @or-sdk/druid (npm)

MAL-2026-11670

Malicious code in @or-sdk/api-tokens-lambda (npm)

MAL-2026-11706

Malicious code in @or-sdk/library (npm)

MAL-2026-11717

Malicious code in @or-sdk/permissions (npm)

MAL-2026-11736

Malicious code in @or-sdk/view-templates (npm)

MAL-2026-11642

Malicious code in @onereach/si-radio-group (npm)